./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product21_true-unreach-call_true-termination.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 635dfa2a Calling Ultimate with: java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product21_true-unreach-call_true-termination.cil.c -s /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2d9788d6a4230717093c0eac3ed0e0e60c8a17a8 .................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.23-635dfa2 [2018-12-09 06:42:33,361 INFO L170 SettingsManager]: Resetting all preferences to default values... [2018-12-09 06:42:33,362 INFO L174 SettingsManager]: Resetting UltimateCore preferences to default values [2018-12-09 06:42:33,368 INFO L177 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2018-12-09 06:42:33,368 INFO L174 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2018-12-09 06:42:33,369 INFO L174 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2018-12-09 06:42:33,369 INFO L174 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2018-12-09 06:42:33,370 INFO L174 SettingsManager]: Resetting LassoRanker preferences to default values [2018-12-09 06:42:33,371 INFO L174 SettingsManager]: Resetting Reaching Definitions preferences to default values [2018-12-09 06:42:33,372 INFO L174 SettingsManager]: Resetting SyntaxChecker preferences to default values [2018-12-09 06:42:33,372 INFO L177 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2018-12-09 06:42:33,372 INFO L174 SettingsManager]: Resetting LTL2Aut preferences to default values [2018-12-09 06:42:33,373 INFO L174 SettingsManager]: Resetting PEA to Boogie preferences to default values [2018-12-09 06:42:33,373 INFO L174 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2018-12-09 06:42:33,374 INFO L174 SettingsManager]: Resetting ChcToBoogie preferences to default values [2018-12-09 06:42:33,374 INFO L174 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2018-12-09 06:42:33,375 INFO L174 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2018-12-09 06:42:33,376 INFO L174 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2018-12-09 06:42:33,377 INFO L174 SettingsManager]: Resetting CodeCheck preferences to default values [2018-12-09 06:42:33,378 INFO L174 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2018-12-09 06:42:33,378 INFO L174 SettingsManager]: Resetting RCFGBuilder preferences to default values [2018-12-09 06:42:33,379 INFO L174 SettingsManager]: Resetting TraceAbstraction preferences to default values [2018-12-09 06:42:33,380 INFO L177 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2018-12-09 06:42:33,380 INFO L177 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2018-12-09 06:42:33,380 INFO L174 SettingsManager]: Resetting TreeAutomizer preferences to default values [2018-12-09 06:42:33,381 INFO L174 SettingsManager]: Resetting IcfgTransformer preferences to default values [2018-12-09 06:42:33,382 INFO L174 SettingsManager]: Resetting Boogie Printer preferences to default values [2018-12-09 06:42:33,382 INFO L174 SettingsManager]: Resetting ReqPrinter preferences to default values [2018-12-09 06:42:33,382 INFO L174 SettingsManager]: Resetting Witness Printer preferences to default values [2018-12-09 06:42:33,383 INFO L177 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2018-12-09 06:42:33,383 INFO L174 SettingsManager]: Resetting CDTParser preferences to default values [2018-12-09 06:42:33,384 INFO L177 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2018-12-09 06:42:33,384 INFO L177 SettingsManager]: ReqParser provides no preferences, ignoring... [2018-12-09 06:42:33,384 INFO L174 SettingsManager]: Resetting SmtParser preferences to default values [2018-12-09 06:42:33,384 INFO L174 SettingsManager]: Resetting Witness Parser preferences to default values [2018-12-09 06:42:33,385 INFO L181 SettingsManager]: Finished resetting all preferences to default values... [2018-12-09 06:42:33,385 INFO L98 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2018-12-09 06:42:33,393 INFO L110 SettingsManager]: Loading preferences was successful [2018-12-09 06:42:33,393 INFO L112 SettingsManager]: Preferences different from defaults after loading the file: [2018-12-09 06:42:33,394 INFO L131 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2018-12-09 06:42:33,394 INFO L133 SettingsManager]: * Create parallel compositions if possible=false [2018-12-09 06:42:33,394 INFO L133 SettingsManager]: * Use SBE=true [2018-12-09 06:42:33,394 INFO L131 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * Use old map elimination=false [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * Use external solver (rank synthesis)=false [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * Use only trivial implications for array writes=true [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2018-12-09 06:42:33,395 INFO L131 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * sizeof long=4 [2018-12-09 06:42:33,395 INFO L133 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * Overapproximate operations on floating types=true [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * sizeof POINTER=4 [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * Check division by zero=IGNORE [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * sizeof long double=12 [2018-12-09 06:42:33,396 INFO L133 SettingsManager]: * Check if freed pointer was valid=false [2018-12-09 06:42:33,397 INFO L133 SettingsManager]: * Assume nondeterminstic values are in range=false [2018-12-09 06:42:33,397 INFO L133 SettingsManager]: * Use constant arrays=true [2018-12-09 06:42:33,397 INFO L133 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2018-12-09 06:42:33,397 INFO L131 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2018-12-09 06:42:33,397 INFO L133 SettingsManager]: * Size of a code block=SequenceOfStatements [2018-12-09 06:42:33,397 INFO L133 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2018-12-09 06:42:33,397 INFO L131 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2018-12-09 06:42:33,397 INFO L133 SettingsManager]: * Trace refinement strategy=CAMEL [2018-12-09 06:42:33,398 INFO L133 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2018-12-09 06:42:33,398 INFO L131 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2018-12-09 06:42:33,398 INFO L133 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2d9788d6a4230717093c0eac3ed0e0e60c8a17a8 [2018-12-09 06:42:33,415 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2018-12-09 06:42:33,422 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2018-12-09 06:42:33,424 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2018-12-09 06:42:33,425 INFO L271 PluginConnector]: Initializing CDTParser... [2018-12-09 06:42:33,425 INFO L276 PluginConnector]: CDTParser initialized [2018-12-09 06:42:33,425 INFO L418 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product21_true-unreach-call_true-termination.cil.c [2018-12-09 06:42:33,459 INFO L221 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/data/26c0d2ddb/80e2887fa5e1427dab363d395ac1cc5e/FLAG2316ba43b [2018-12-09 06:42:33,953 INFO L307 CDTParser]: Found 1 translation units. [2018-12-09 06:42:33,953 INFO L161 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/sv-benchmarks/c/product-lines/elevator_spec3_product21_true-unreach-call_true-termination.cil.c [2018-12-09 06:42:33,962 INFO L355 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/data/26c0d2ddb/80e2887fa5e1427dab363d395ac1cc5e/FLAG2316ba43b [2018-12-09 06:42:33,970 INFO L363 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/data/26c0d2ddb/80e2887fa5e1427dab363d395ac1cc5e [2018-12-09 06:42:33,972 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2018-12-09 06:42:33,973 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2018-12-09 06:42:33,973 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2018-12-09 06:42:33,973 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2018-12-09 06:42:33,975 INFO L276 PluginConnector]: CACSL2BoogieTranslator initialized [2018-12-09 06:42:33,976 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.12 06:42:33" (1/1) ... [2018-12-09 06:42:33,977 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@3db95926 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:33, skipping insertion in model container [2018-12-09 06:42:33,977 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 09.12 06:42:33" (1/1) ... [2018-12-09 06:42:33,981 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2018-12-09 06:42:34,014 INFO L176 MainTranslator]: Built tables and reachable declarations [2018-12-09 06:42:34,339 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-09 06:42:34,351 INFO L191 MainTranslator]: Completed pre-run [2018-12-09 06:42:34,421 INFO L203 PostProcessor]: Analyzing one entry point: main [2018-12-09 06:42:34,445 INFO L195 MainTranslator]: Completed translation [2018-12-09 06:42:34,446 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34 WrapperNode [2018-12-09 06:42:34,446 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2018-12-09 06:42:34,446 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2018-12-09 06:42:34,446 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2018-12-09 06:42:34,446 INFO L276 PluginConnector]: Boogie Procedure Inliner initialized [2018-12-09 06:42:34,452 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,467 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,627 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2018-12-09 06:42:34,627 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2018-12-09 06:42:34,628 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2018-12-09 06:42:34,628 INFO L276 PluginConnector]: Boogie Preprocessor initialized [2018-12-09 06:42:34,634 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,634 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,660 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,660 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,735 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,806 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,836 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... [2018-12-09 06:42:34,884 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2018-12-09 06:42:34,885 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2018-12-09 06:42:34,885 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2018-12-09 06:42:34,885 INFO L276 PluginConnector]: RCFGBuilder initialized [2018-12-09 06:42:34,885 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:42:34,920 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.alloc [2018-12-09 06:42:34,920 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2018-12-09 06:42:34,921 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2018-12-09 06:42:34,921 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2018-12-09 06:42:41,841 INFO L275 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2018-12-09 06:42:41,841 INFO L280 CfgBuilder]: Removed 1897 assue(true) statements. [2018-12-09 06:42:41,842 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 06:42:41 BoogieIcfgContainer [2018-12-09 06:42:41,842 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2018-12-09 06:42:41,842 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2018-12-09 06:42:41,842 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2018-12-09 06:42:41,845 INFO L276 PluginConnector]: BuchiAutomizer initialized [2018-12-09 06:42:41,846 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 06:42:41,846 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 09.12 06:42:33" (1/3) ... [2018-12-09 06:42:41,847 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4855f47b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.12 06:42:41, skipping insertion in model container [2018-12-09 06:42:41,847 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 06:42:41,848 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 09.12 06:42:34" (2/3) ... [2018-12-09 06:42:41,848 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@4855f47b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 09.12 06:42:41, skipping insertion in model container [2018-12-09 06:42:41,848 INFO L102 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2018-12-09 06:42:41,848 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 06:42:41" (3/3) ... [2018-12-09 06:42:41,849 INFO L375 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product21_true-unreach-call_true-termination.cil.c [2018-12-09 06:42:41,882 INFO L133 ementStrategyFactory]: Using default assertion order modulation [2018-12-09 06:42:41,882 INFO L374 BuchiCegarLoop]: Interprodecural is true [2018-12-09 06:42:41,883 INFO L375 BuchiCegarLoop]: Hoare is false [2018-12-09 06:42:41,883 INFO L376 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2018-12-09 06:42:41,883 INFO L377 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2018-12-09 06:42:41,883 INFO L378 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2018-12-09 06:42:41,883 INFO L379 BuchiCegarLoop]: Difference is false [2018-12-09 06:42:41,883 INFO L380 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2018-12-09 06:42:41,883 INFO L383 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2018-12-09 06:42:41,952 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8698 states. [2018-12-09 06:42:42,102 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1757 [2018-12-09 06:42:42,102 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:42:42,102 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:42:42,119 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:42,120 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:42,120 INFO L442 BuchiCegarLoop]: ======== Iteration 1============ [2018-12-09 06:42:42,120 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8698 states. [2018-12-09 06:42:42,163 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1757 [2018-12-09 06:42:42,163 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:42:42,163 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:42:42,166 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:42,166 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:42,172 INFO L794 eck$LassoCheckResult]: Stem: 2690#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 8068#L-1true havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1273#L3392true havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1794#L3400true main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 7648#L385true assume 0 != main_~tmp~8; 7816#L358true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4131#L2207true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 4054#L444true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3771#L469true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7322#L2485true assume 0 == initPersonOnFloor_~floor; 7269#L2486true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3188#L2593-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5589#L2277true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8075#L2289-2true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6860#L844true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8306#L896true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8450#L2832true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8325#L2833true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5125#L861true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7933#L882true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7247#L2837true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3528#L2938true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2117#L1525true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6862#L844-1true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5093#L861-10true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7898#L882-10true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3186#L1536true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4170#L1675true assume !(0 != timeShift_~tmp___9~2); 7776#L1766true assume !(1 == ~doorState~0); 7764#L1766-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7297#L1428true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1354#L1449true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5508#L1401true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5567#L1048-2true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5038#L1217-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5955#L1370-2true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8476#L1419true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8409#L1774true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1695#L1463true assume !(1 == ~currentHeading~0); 430#L1473true assume !(0 == ~currentFloorID~0); 434#L1473-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 31#L1479-5true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6695#L2963true assume !(-1 == ~expectedDirection~0); 5147#L2975true assume !(1 == ~expectedDirection~0); 5067#L2976true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6864#L844-2true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8298#L896-3true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8449#L2832-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8327#L2833-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5099#L861-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7905#L882-12true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7325#L2837-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3492#L2938-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2084#L1525-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6948#L844-3true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5074#L861-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8052#L882-22true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3187#L1536-1true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4173#L1675-1true assume !(0 != timeShift_~tmp___9~2); 7762#L1766-3true assume !(1 == ~doorState~0); 7768#L1766-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7304#L1428-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1357#L1449-2true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5516#L1401-2true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5558#L1048-8true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5720#L1217-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5946#L1370-8true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8462#L1419-2true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8410#L1774-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1671#L1463-3true assume !(1 == ~currentHeading~0); 205#L1473-9true assume !(0 == ~currentFloorID~0); 207#L1473-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25#L1479-11true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6697#L2963-1true assume !(-1 == ~expectedDirection~0); 5121#L2975-1true assume !(1 == ~expectedDirection~0); 5064#L2976-1true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6950#L844-4true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8303#L896-6true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8446#L2832-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8326#L2833-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5078#L861-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8057#L882-24true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7333#L2837-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3498#L2938-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2085#L1525-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6952#L844-5true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5027#L861-34true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8026#L882-34true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3178#L1536-2true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4154#L1675-2true assume !(0 != timeShift_~tmp___9~2); 7770#L1766-6true assume 1 == ~doorState~0;~doorState~0 := 0; 7862#L1766-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7309#L1428-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1360#L1449-4true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5524#L1401-4true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5549#L1048-14true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5707#L1217-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5939#L1370-14true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8465#L1419-4true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8412#L1774-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1679#L1463-6true assume !(1 == ~currentHeading~0); 201#L1473-18true assume !(0 == ~currentFloorID~0); 185#L1473-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20#L1479-17true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6702#L2963-2true assume !(-1 == ~expectedDirection~0); 5126#L2975-2true assume !(1 == ~expectedDirection~0); 5018#L2976-2true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 4056#L444-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3735#L469-1true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7299#L2485-1true assume 0 == initPersonOnFloor_~floor; 7195#L2486-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3177#L2593-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5588#L2277-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8065#L2289-5true havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6954#L844-6true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8292#L896-9true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8447#L2832-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8321#L2833-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5010#L861-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8004#L882-36true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7336#L2837-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3495#L2938-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2090#L1525-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6958#L844-7true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5008#L861-46true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7981#L882-46true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3179#L1536-3true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4157#L1675-3true assume !(0 != timeShift_~tmp___9~2); 7866#L1766-9true assume !(1 == ~doorState~0); 7868#L1766-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7289#L1428-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1348#L1449-6true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5495#L1401-6true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5509#L1048-20true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5693#L1217-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5935#L1370-20true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8469#L1419-6true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8411#L1774-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1657#L1463-9true assume !(1 == ~currentHeading~0); 180#L1473-27true assume !(0 == ~currentFloorID~0); 159#L1473-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14#L1479-23true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6706#L2963-3true assume !(-1 == ~expectedDirection~0); 5135#L2975-3true assume !(1 == ~expectedDirection~0); 5023#L2976-3true cleanup_~i~0 := 0; 8419#L188-2true [2018-12-09 06:42:42,175 INFO L796 eck$LassoCheckResult]: Loop: 8419#L188-2true assume !false; 8451#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 8404#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 5744#L691true cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 7204#L196true assume 1 != cleanup_~tmp___0~0; 7202#L196-1true havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2636#L2214-244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 6104#L2241-244true anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 67#L952true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 6055#L1016true isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 6644#L1029true cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 7576#L208true assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6935#L844-8true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8402#L896-12true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8448#L2832-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8322#L2833-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 4999#L861-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7985#L882-48true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7316#L2837-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3504#L2938-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2093#L1525-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6938#L844-9true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 4991#L861-58true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7970#L882-58true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3180#L1536-4true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4160#L1675-4true assume !(0 != timeShift_~tmp___9~2); 7869#L1766-12true assume !(1 == ~doorState~0); 7856#L1766-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7293#L1428-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1351#L1449-8true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5501#L1401-8true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5497#L1048-26true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5683#L1217-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5928#L1370-26true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8454#L1419-8true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8413#L1774-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1664#L1463-12true assume !(1 == ~currentHeading~0); 138#L1473-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 146#L1473-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8#L1479-29true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6704#L2963-4true assume !(-1 == ~expectedDirection~0); 5131#L2975-4true assume !(1 == ~expectedDirection~0); 5028#L2976-4true cleanup_~i~0 := 1 + cleanup_~i~0; 8419#L188-2true [2018-12-09 06:42:42,188 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:42,189 INFO L82 PathProgramCache]: Analyzing trace with hash 1722019930, now seen corresponding path program 1 times [2018-12-09 06:42:42,190 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:42,191 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:42,227 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:42,227 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:42,227 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:42,289 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:42,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:42,384 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:42,384 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:42:42,387 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:42:42,387 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:42,387 INFO L82 PathProgramCache]: Analyzing trace with hash 613728287, now seen corresponding path program 1 times [2018-12-09 06:42:42,388 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:42,388 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:42,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:42,388 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:42,388 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:42,400 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:42,450 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:42,450 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:42,450 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 06:42:42,451 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:42:42,460 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 06:42:42,461 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-09 06:42:42,462 INFO L87 Difference]: Start difference. First operand 8698 states. Second operand 7 states. [2018-12-09 06:42:47,392 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:42:47,393 INFO L93 Difference]: Finished difference Result 27536 states and 51721 transitions. [2018-12-09 06:42:47,393 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-12-09 06:42:47,396 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27536 states and 51721 transitions. [2018-12-09 06:42:47,539 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6204 [2018-12-09 06:42:47,690 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27536 states to 27432 states and 51600 transitions. [2018-12-09 06:42:47,691 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27432 [2018-12-09 06:42:47,707 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27432 [2018-12-09 06:42:47,708 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27432 states and 51600 transitions. [2018-12-09 06:42:47,737 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:42:47,737 INFO L705 BuchiCegarLoop]: Abstraction has 27432 states and 51600 transitions. [2018-12-09 06:42:47,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27432 states and 51600 transitions. [2018-12-09 06:42:47,934 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27432 to 13730. [2018-12-09 06:42:47,935 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13730 states. [2018-12-09 06:42:47,949 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13730 states to 13730 states and 25850 transitions. [2018-12-09 06:42:47,950 INFO L728 BuchiCegarLoop]: Abstraction has 13730 states and 25850 transitions. [2018-12-09 06:42:47,950 INFO L608 BuchiCegarLoop]: Abstraction has 13730 states and 25850 transitions. [2018-12-09 06:42:47,950 INFO L442 BuchiCegarLoop]: ======== Iteration 2============ [2018-12-09 06:42:47,950 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13730 states and 25850 transitions. [2018-12-09 06:42:47,975 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3039 [2018-12-09 06:42:47,975 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:42:47,975 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:42:47,978 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:47,978 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:47,978 INFO L794 eck$LassoCheckResult]: Stem: 40299#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 40300#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 38227#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 38228#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 38770#L385 assume 0 != main_~tmp~8; 44644#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 41525#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 41383#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 39609#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 41251#L2485 assume 0 == initPersonOnFloor_~floor; 44347#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 36967#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 40844#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42625#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 43940#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 43941#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45137#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 45154#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 42325#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42326#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 44307#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 36922#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39325#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 39326#L2214 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 39214#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 40818#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 41465#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40840#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40841#L1675 assume !(0 != timeShift_~tmp___9~2); 41579#L1766 assume !(1 == ~doorState~0); 44695#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 44370#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 38318#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 38319#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 42985#L1048-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~22;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~22;isTopFloor_~retValue_acc~22 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~22; 43046#L2788-2 stopRequestedInDirection__wrappee__weight_#t~ret28 := isTopFloor_#res;stopRequestedInDirection__wrappee__weight_~tmp~15 := stopRequestedInDirection__wrappee__weight_#t~ret28;havoc stopRequestedInDirection__wrappee__weight_#t~ret28; 43860#L1052-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~15;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 36770#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 43358#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 45180#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 38693#L1463 assume !(1 == ~currentHeading~0); 37013#L1473 assume !(0 == ~currentFloorID~0); 37014#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36757#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 47091#L2963 assume !(-1 == ~expectedDirection~0); 47088#L2975 assume !(1 == ~expectedDirection~0); 47086#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 47085#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 47084#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 47083#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 47082#L2894-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 47081#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 42093#L2915-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40656#L2926-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40657#L2937-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37054#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39241#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39243#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43946#L861-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42585#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 48188#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 48186#L1675-1 assume !(0 != timeShift_~tmp___9~2); 48185#L1766-3 assume !(1 == ~doorState~0); 48184#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48183#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48178#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48176#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48177#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 49575#L1217-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 49570#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 49568#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 49566#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 49567#L1463-3 assume !(1 == ~currentHeading~0); 49717#L1473-9 assume !(0 == ~currentFloorID~0); 36761#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36333#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36334#L2963-1 assume !(-1 == ~expectedDirection~0); 42318#L2975-1 assume !(1 == ~expectedDirection~0); 42320#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 45307#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 45306#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45305#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37572#L2894-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37574#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41807#L2915-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40662#L2926-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40664#L2937-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37059#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39244#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39246#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43948#L861-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42554#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40824#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40825#L1675-2 assume !(0 != timeShift_~tmp___9~2); 41559#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 48085#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48083#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48079#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48077#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48076#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 48049#L1217-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 48035#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 48032#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 48031#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 38673#L1463-6 assume !(1 == ~currentHeading~0); 38674#L1473-18 assume !(0 == ~currentFloorID~0); 36718#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36319#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36320#L2963-2 assume !(-1 == ~expectedDirection~0); 42328#L2975-2 assume !(1 == ~expectedDirection~0); 42160#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 41386#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 39616#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 41240#L2485-1 assume 0 == initPersonOnFloor_~floor; 44268#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 36950#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 40823#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42588#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 45330#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 45329#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45328#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37566#L2894-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37568#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41809#L2915-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40659#L2926-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40661#L2937-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37050#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39256#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39258#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43951#L861-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42845#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40826#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40827#L1675-3 assume !(0 != timeShift_~tmp___9~2); 41562#L1766-9 assume !(1 == ~doorState~0); 48028#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48025#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48017#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48014#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48015#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 48164#L1217-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 48165#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 45218#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 45219#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 47951#L1463-9 assume !(1 == ~currentHeading~0); 47950#L1473-27 assume !(0 == ~currentFloorID~0); 36665#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36302#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36303#L2963-3 assume !(-1 == ~expectedDirection~0); 42344#L2975-3 assume !(1 == ~expectedDirection~0); 42167#L2976-3 cleanup_~i~0 := 0; 42168#L188-2 [2018-12-09 06:42:47,981 INFO L796 eck$LassoCheckResult]: Loop: 42168#L188-2 assume !false; 45192#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 45178#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 43136#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 43137#L196 assume 1 != cleanup_~tmp___0~0; 44279#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 40247#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 39283#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 36457#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 36458#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 43439#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 43762#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 43943#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 43944#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45177#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37575#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37576#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41803#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40668#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40670#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37052#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39264#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39266#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43945#L861-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42797#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40828#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40829#L1675-4 assume !(0 != timeShift_~tmp___9~2); 41565#L1766-12 assume !(1 == ~doorState~0); 47990#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 47986#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 47982#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 47980#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 47974#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 47972#L1217-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 36632#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 43348#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 47095#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 47094#L1463-12 assume !(1 == ~currentHeading~0); 47093#L1473-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 36626#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36285#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36286#L2963-4 assume !(-1 == ~expectedDirection~0); 42337#L2975-4 assume !(1 == ~expectedDirection~0); 42175#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 42168#L188-2 [2018-12-09 06:42:47,990 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:47,990 INFO L82 PathProgramCache]: Analyzing trace with hash 1044669180, now seen corresponding path program 1 times [2018-12-09 06:42:47,990 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:47,990 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:47,991 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:47,992 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:47,992 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:48,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:48,047 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:48,047 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:48,047 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:42:48,047 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:42:48,048 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:48,048 INFO L82 PathProgramCache]: Analyzing trace with hash -205289530, now seen corresponding path program 1 times [2018-12-09 06:42:48,048 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:48,048 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:48,049 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:48,049 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:48,049 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:48,057 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:48,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:48,080 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:48,080 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 06:42:48,080 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:42:48,080 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 06:42:48,080 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 06:42:48,080 INFO L87 Difference]: Start difference. First operand 13730 states and 25850 transitions. cyclomatic complexity: 12121 Second operand 5 states. [2018-12-09 06:42:48,884 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:42:48,884 INFO L93 Difference]: Finished difference Result 21693 states and 40682 transitions. [2018-12-09 06:42:48,884 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 06:42:48,885 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21693 states and 40682 transitions. [2018-12-09 06:42:48,936 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5117 [2018-12-09 06:42:48,977 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21693 states to 21693 states and 40682 transitions. [2018-12-09 06:42:48,977 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21693 [2018-12-09 06:42:48,989 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21693 [2018-12-09 06:42:48,989 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21693 states and 40682 transitions. [2018-12-09 06:42:49,001 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:42:49,001 INFO L705 BuchiCegarLoop]: Abstraction has 21693 states and 40682 transitions. [2018-12-09 06:42:49,019 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21693 states and 40682 transitions. [2018-12-09 06:42:49,133 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21693 to 13775. [2018-12-09 06:42:49,133 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13775 states. [2018-12-09 06:42:49,147 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13775 states to 13775 states and 25895 transitions. [2018-12-09 06:42:49,148 INFO L728 BuchiCegarLoop]: Abstraction has 13775 states and 25895 transitions. [2018-12-09 06:42:49,148 INFO L608 BuchiCegarLoop]: Abstraction has 13775 states and 25895 transitions. [2018-12-09 06:42:49,148 INFO L442 BuchiCegarLoop]: ======== Iteration 3============ [2018-12-09 06:42:49,148 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13775 states and 25895 transitions. [2018-12-09 06:42:49,172 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3049 [2018-12-09 06:42:49,172 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:42:49,172 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:42:49,175 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:49,176 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:49,176 INFO L794 eck$LassoCheckResult]: Stem: 75748#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 75749#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 73680#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 73681#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 74220#L385 assume 0 != main_~tmp~8; 80132#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 77000#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 76857#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75060#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76725#L2485 assume 0 == initPersonOnFloor_~floor; 79823#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72409#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 76308#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78085#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 79422#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79423#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80588#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80605#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77786#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77787#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79784#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72363#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74777#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74778#L2214 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74667#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 76282#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76940#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76304#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76305#L1675 assume !(0 != timeShift_~tmp___9~2); 77057#L1766 assume !(1 == ~doorState~0); 80175#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79846#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73769#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73770#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78446#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 77659#L1217-2 assume !(0 == ~currentFloorID~0); 77660#L1223-2 assume !(~currentFloorID~0 > 0); 78175#L1238-2 assume ~currentFloorID~0 > 0; 80301#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80727#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72203#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 80678#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80679#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74143#L1463 assume !(1 == ~currentHeading~0); 72454#L1473 assume !(0 == ~currentFloorID~0); 72455#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71791#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71792#L2963 assume !(-1 == ~expectedDirection~0); 77826#L2975 assume !(1 == ~expectedDirection~0); 77700#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 77701#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79424#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80581#L2832-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80659#L2833-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77744#L861-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77745#L882-12 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79869#L2837-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72496#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74691#L1525-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74692#L2214-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74480#L2241-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77208#L1496-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76911#L1508-1 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76306#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76307#L1675-1 assume !(0 != timeShift_~tmp___9~2); 77062#L1766-3 assume !(1 == ~doorState~0); 80174#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79851#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73774#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73775#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78454#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78503#L1217-8 assume !(0 == ~currentFloorID~0); 78397#L1223-8 assume !(~currentFloorID~0 > 0); 78398#L1238-8 assume ~currentFloorID~0 > 0; 80283#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80723#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72148#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78801#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80667#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74110#L1463-3 assume !(1 == ~currentHeading~0); 72193#L1473-9 assume !(0 == ~currentFloorID~0); 72194#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71774#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71775#L2963-1 assume !(-1 == ~expectedDirection~0); 77780#L2975-1 assume !(1 == ~expectedDirection~0); 77695#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 77696#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79427#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80585#L2832-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80606#L2833-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77715#L861-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77717#L882-24 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79877#L2837-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72928#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 82130#L1525-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 82128#L2214-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 82124#L2241-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 82115#L1496-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 82114#L1508-2 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 82112#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 82106#L1675-2 assume !(0 != timeShift_~tmp___9~2); 80186#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 80187#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79855#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73779#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73780#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78463#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78492#L1217-14 assume !(0 == ~currentFloorID~0); 78347#L1223-14 assume !(~currentFloorID~0 > 0); 78349#L1238-14 assume ~currentFloorID~0 > 0; 80272#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80718#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72128#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78800#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80669#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 80744#L1463-6 assume !(1 == ~currentHeading~0); 72186#L1473-18 assume !(0 == ~currentFloorID~0); 72152#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71760#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71761#L2963-2 assume !(-1 == ~expectedDirection~0); 77789#L2975-2 assume !(1 == ~expectedDirection~0); 77628#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 76860#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75065#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76717#L2485-1 assume 0 == initPersonOnFloor_~floor; 79744#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72391#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 76287#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78048#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 81463#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 81457#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81454#L2832-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 81455#L2833-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77614#L861-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77615#L882-36 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79881#L2837-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72491#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74706#L1525-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74707#L2214-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74453#L2241-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77213#L1496-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76919#L1508-3 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76290#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76291#L1675-3 assume !(0 != timeShift_~tmp___9~2); 77039#L1766-9 assume !(1 == ~doorState~0); 80339#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79841#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73759#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73760#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78429#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78447#L1217-20 assume !(0 == ~currentFloorID~0); 78332#L1223-20 assume !(~currentFloorID~0 > 0); 78333#L1238-20 assume ~currentFloorID~0 > 0; 80265#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80739#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72238#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78798#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80912#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 80743#L1463-9 assume !(1 == ~currentHeading~0); 72140#L1473-27 assume !(0 == ~currentFloorID~0); 72101#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71743#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71744#L2963-3 assume !(-1 == ~expectedDirection~0); 77801#L2975-3 assume !(1 == ~expectedDirection~0); 77633#L2976-3 cleanup_~i~0 := 0; 77634#L188-2 [2018-12-09 06:42:49,181 INFO L796 eck$LassoCheckResult]: Loop: 77634#L188-2 assume !false; 80643#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 80634#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 78596#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 78597#L196 assume 1 != cleanup_~tmp___0~0; 79754#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 75695#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74730#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 71898#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 71899#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 78895#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 79244#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 81671#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 81670#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81668#L2832-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 81667#L2833-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77597#L861-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77598#L882-48 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79861#L2837-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72493#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74714#L1525-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74715#L2214-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74677#L2241-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77202#L1496-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76921#L1508-4 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76292#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76293#L1675-4 assume !(0 != timeShift_~tmp___9~2); 77043#L1766-12 assume !(1 == ~doorState~0); 80322#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79844#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73764#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73765#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78430#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78431#L1217-26 assume !(0 == ~currentFloorID~0); 78317#L1223-26 assume !(~currentFloorID~0 > 0); 78318#L1238-26 assume ~currentFloorID~0 > 0; 80260#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80734#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 71902#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78795#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80661#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74101#L1463-12 assume !(1 == ~currentHeading~0); 72064#L1473-36 assume !(0 == ~currentFloorID~0); 72065#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71726#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71727#L2963-4 assume !(-1 == ~expectedDirection~0); 77794#L2975-4 assume !(1 == ~expectedDirection~0); 77639#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 77634#L188-2 [2018-12-09 06:42:49,192 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:49,192 INFO L82 PathProgramCache]: Analyzing trace with hash 1222042957, now seen corresponding path program 1 times [2018-12-09 06:42:49,192 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:49,192 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:49,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:49,193 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:49,193 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:49,211 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:49,256 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:49,256 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:49,257 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:42:49,257 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:42:49,257 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:49,257 INFO L82 PathProgramCache]: Analyzing trace with hash -551793799, now seen corresponding path program 1 times [2018-12-09 06:42:49,257 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:49,257 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:49,258 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:49,258 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:49,258 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:49,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:49,294 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:49,294 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:49,294 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-09 06:42:49,294 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:42:49,294 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-09 06:42:49,294 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2018-12-09 06:42:49,295 INFO L87 Difference]: Start difference. First operand 13775 states and 25895 transitions. cyclomatic complexity: 12121 Second operand 6 states. [2018-12-09 06:42:57,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:42:57,265 INFO L93 Difference]: Finished difference Result 24876 states and 46385 transitions. [2018-12-09 06:42:57,265 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2018-12-09 06:42:57,266 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24876 states and 46385 transitions. [2018-12-09 06:42:57,322 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5535 [2018-12-09 06:42:57,368 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24876 states to 24876 states and 46385 transitions. [2018-12-09 06:42:57,368 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24876 [2018-12-09 06:42:57,380 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24876 [2018-12-09 06:42:57,380 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24876 states and 46385 transitions. [2018-12-09 06:42:57,392 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:42:57,392 INFO L705 BuchiCegarLoop]: Abstraction has 24876 states and 46385 transitions. [2018-12-09 06:42:57,405 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24876 states and 46385 transitions. [2018-12-09 06:42:57,505 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24876 to 13775. [2018-12-09 06:42:57,505 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13775 states. [2018-12-09 06:42:57,519 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13775 states to 13775 states and 25546 transitions. [2018-12-09 06:42:57,519 INFO L728 BuchiCegarLoop]: Abstraction has 13775 states and 25546 transitions. [2018-12-09 06:42:57,519 INFO L608 BuchiCegarLoop]: Abstraction has 13775 states and 25546 transitions. [2018-12-09 06:42:57,519 INFO L442 BuchiCegarLoop]: ======== Iteration 4============ [2018-12-09 06:42:57,519 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13775 states and 25546 transitions. [2018-12-09 06:42:57,542 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3049 [2018-12-09 06:42:57,542 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:42:57,542 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:42:57,544 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:57,545 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:42:57,545 INFO L794 eck$LassoCheckResult]: Stem: 114438#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 114439#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 112337#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 112338#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 112888#L385 assume 0 != main_~tmp~8; 119075#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 115739#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 115597#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 113729#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 115452#L2485 assume 0 == initPersonOnFloor_~floor; 118742#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 111086#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115028#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116891#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118343#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118344#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119544#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119561#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116595#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116596#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118703#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111041#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 113444#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 113446#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116543#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 116544#L865-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116944#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 115024#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 115025#L1675 assume !(0 != timeShift_~tmp___9~2); 115802#L1766 assume !(1 == ~doorState~0); 119131#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 118765#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 112426#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 112427#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 117245#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 116465#L1217-2 assume !(0 == ~currentFloorID~0); 116466#L1223-2 assume !(~currentFloorID~0 > 0); 116981#L1238-2 assume ~currentFloorID~0 > 0; 119256#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119672#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110886#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 119687#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 119686#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112811#L1463 assume !(1 == ~currentHeading~0); 111132#L1473 assume !(0 == ~currentFloorID~0); 111133#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110471#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110472#L2963 assume !(-1 == ~expectedDirection~0); 116635#L2975 assume !(1 == ~expectedDirection~0); 116506#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 116507#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118345#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119537#L2832-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119563#L2833-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116552#L861-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116553#L882-12 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118789#L2837-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111630#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 119688#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 119689#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 122836#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 122834#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 122818#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 122812#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 122809#L1675-1 assume !(0 != timeShift_~tmp___9~2); 122810#L1766-3 assume !(1 == ~doorState~0); 123979#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123978#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123973#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123971#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123972#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117391#L1217-8 assume !(0 == ~currentFloorID~0); 117196#L1223-8 assume !(~currentFloorID~0 > 0); 117197#L1238-8 assume ~currentFloorID~0 > 0; 119236#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119668#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110831#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 124060#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 124058#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112781#L1463-3 assume !(1 == ~currentHeading~0); 110876#L1473-9 assume !(0 == ~currentFloorID~0); 110877#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110454#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110455#L2963-1 assume !(-1 == ~expectedDirection~0); 116589#L2975-1 assume !(1 == ~expectedDirection~0); 116501#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 116502#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118348#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119541#L2832-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119562#L2833-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116523#L861-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116525#L882-24 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118798#L2837-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111605#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 121742#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 121743#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 121794#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 121793#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 121728#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 121727#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 121720#L1675-2 assume !(0 != timeShift_~tmp___9~2); 121721#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 123654#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123649#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123644#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123634#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123632#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117389#L1217-14 assume !(0 == ~currentFloorID~0); 117147#L1223-14 assume !(~currentFloorID~0 > 0); 117149#L1238-14 assume ~currentFloorID~0 > 0; 119227#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119663#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110938#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123543#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 123540#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112792#L1463-6 assume !(1 == ~currentHeading~0); 110869#L1473-18 assume !(0 == ~currentFloorID~0); 110835#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110440#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110441#L2963-2 assume !(-1 == ~expectedDirection~0); 116598#L2975-2 assume !(1 == ~expectedDirection~0); 116431#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 115600#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 113736#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 115438#L2485-1 assume 0 == initPersonOnFloor_~floor; 118664#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 111069#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115007#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116855#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118349#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118350#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119534#L2832-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119607#L2833-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116419#L861-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116420#L882-36 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118802#L2837-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111612#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 121052#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 121053#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 121106#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 121057#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 121039#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 121037#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 121035#L1675-3 assume !(0 != timeShift_~tmp___9~2); 121036#L1766-9 assume !(1 == ~doorState~0); 123726#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123722#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123719#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123718#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 117246#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117247#L1217-20 assume !(0 == ~currentFloorID~0); 117132#L1223-20 assume !(~currentFloorID~0 > 0); 117133#L1238-20 assume ~currentFloorID~0 > 0; 119220#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119684#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110791#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 124059#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 124057#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112763#L1463-9 assume !(1 == ~currentHeading~0); 110823#L1473-27 assume !(0 == ~currentFloorID~0); 110784#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110423#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110424#L2963-3 assume !(-1 == ~expectedDirection~0); 116614#L2975-3 assume !(1 == ~expectedDirection~0); 116438#L2976-3 cleanup_~i~0 := 0; 116439#L188-2 [2018-12-09 06:42:57,550 INFO L796 eck$LassoCheckResult]: Loop: 116439#L188-2 assume !false; 119592#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 119583#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 117396#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 117397#L196 assume 1 != cleanup_~tmp___0~0; 118675#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 114386#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 113402#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 110578#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 110579#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 117754#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 118159#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118346#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118347#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119582#L2832-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119559#L2833-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116401#L861-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116402#L882-48 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118780#L2837-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111616#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 119730#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 119731#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 122246#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 122245#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 122228#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 122227#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 122220#L1675-4 assume !(0 != timeShift_~tmp___9~2); 122221#L1766-12 assume !(1 == ~doorState~0); 123653#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123639#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123633#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123630#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123631#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117387#L1217-26 assume !(0 == ~currentFloorID~0); 117117#L1223-26 assume !(~currentFloorID~0 > 0); 117118#L1238-26 assume ~currentFloorID~0 > 0; 119215#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119679#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110582#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123461#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 123460#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112771#L1463-12 assume !(1 == ~currentHeading~0); 110746#L1473-36 assume !(0 == ~currentFloorID~0); 110747#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110406#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110407#L2963-4 assume !(-1 == ~expectedDirection~0); 116607#L2975-4 assume !(1 == ~expectedDirection~0); 116447#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 116439#L188-2 [2018-12-09 06:42:57,558 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:57,558 INFO L82 PathProgramCache]: Analyzing trace with hash -435274073, now seen corresponding path program 1 times [2018-12-09 06:42:57,558 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:57,558 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:57,558 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:57,559 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:57,559 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:57,568 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:57,602 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:57,602 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:57,602 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:42:57,602 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:42:57,602 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:42:57,602 INFO L82 PathProgramCache]: Analyzing trace with hash -413829828, now seen corresponding path program 1 times [2018-12-09 06:42:57,603 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:42:57,603 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:42:57,603 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:57,603 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:42:57,603 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:42:57,607 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:42:57,633 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:42:57,633 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:42:57,633 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 06:42:57,633 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:42:57,633 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 06:42:57,634 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-09 06:42:57,634 INFO L87 Difference]: Start difference. First operand 13775 states and 25546 transitions. cyclomatic complexity: 11772 Second operand 7 states. [2018-12-09 06:43:04,539 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:04,539 INFO L93 Difference]: Finished difference Result 37926 states and 70312 transitions. [2018-12-09 06:43:04,540 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2018-12-09 06:43:04,540 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37926 states and 70312 transitions. [2018-12-09 06:43:04,720 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8880 [2018-12-09 06:43:04,789 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37926 states to 37926 states and 70312 transitions. [2018-12-09 06:43:04,789 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37926 [2018-12-09 06:43:04,806 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37926 [2018-12-09 06:43:04,806 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37926 states and 70312 transitions. [2018-12-09 06:43:04,821 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:04,821 INFO L705 BuchiCegarLoop]: Abstraction has 37926 states and 70312 transitions. [2018-12-09 06:43:04,842 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37926 states and 70312 transitions. [2018-12-09 06:43:04,963 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37926 to 17507. [2018-12-09 06:43:04,963 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17507 states. [2018-12-09 06:43:04,981 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17507 states to 17507 states and 32458 transitions. [2018-12-09 06:43:04,981 INFO L728 BuchiCegarLoop]: Abstraction has 17507 states and 32458 transitions. [2018-12-09 06:43:04,981 INFO L608 BuchiCegarLoop]: Abstraction has 17507 states and 32458 transitions. [2018-12-09 06:43:04,982 INFO L442 BuchiCegarLoop]: ======== Iteration 5============ [2018-12-09 06:43:04,982 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17507 states and 32458 transitions. [2018-12-09 06:43:05,012 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4034 [2018-12-09 06:43:05,012 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:05,012 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:05,015 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:05,015 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:05,016 INFO L794 eck$LassoCheckResult]: Stem: 166108#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 166109#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 164043#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 164044#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 164576#L385 assume 0 != main_~tmp~8; 170421#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 167327#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 167185#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 165422#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167061#L2485 assume 0 == initPersonOnFloor_~floor; 170110#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 162818#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 166649#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 168403#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 169705#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 169706#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 170888#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 170905#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 168102#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168103#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 170071#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 162771#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 165138#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 165139#L2214 assume !(0 == isFloorCalling_~floorID); 167730#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 165029#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 166623#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 167267#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 166645#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 166646#L1675 assume !(0 != timeShift_~tmp___9~2); 167380#L1766 assume !(1 == ~doorState~0); 170460#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170133#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164132#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164133#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168762#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 167970#L1217-2 assume !(0 == ~currentFloorID~0); 167971#L1223-2 assume !(~currentFloorID~0 > 0); 168493#L1238-2 assume ~currentFloorID~0 > 0; 170586#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171016#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162620#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 171031#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 171030#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164499#L1463 assume !(1 == ~currentHeading~0); 162862#L1473 assume !(0 == ~currentFloorID~0); 162863#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162205#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 162206#L2963 assume !(-1 == ~expectedDirection~0); 168144#L2975 assume !(1 == ~expectedDirection~0); 168145#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 176487#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 176486#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 170955#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 163410#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163411#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 170654#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 170655#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 173496#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 173494#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 173495#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 168023#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 168024#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 173484#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 173478#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 173476#L1675-1 assume !(0 != timeShift_~tmp___9~2); 167383#L1766-3 assume !(1 == ~doorState~0); 170459#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170138#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164137#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164138#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168770#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168813#L1217-8 assume !(0 == ~currentFloorID~0); 168714#L1223-8 assume !(~currentFloorID~0 > 0); 168715#L1238-8 assume ~currentFloorID~0 > 0; 170568#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171012#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162564#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 179630#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 179629#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164469#L1463-3 assume !(1 == ~currentHeading~0); 162610#L1473-9 assume !(0 == ~currentFloorID~0); 162611#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162584#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 171738#L2963-1 assume !(-1 == ~expectedDirection~0); 171450#L2975-1 assume !(1 == ~expectedDirection~0); 171433#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171416#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171413#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171410#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171406#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163419#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168010#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 163335#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 162908#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 165053#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 165055#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 169713#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 171350#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168332#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 175705#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 175699#L1675-2 assume !(0 != timeShift_~tmp___9~2); 170471#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 170472#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170142#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164142#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164143#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168778#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168803#L1217-14 assume !(0 == ~currentFloorID~0); 168664#L1223-14 assume !(~currentFloorID~0 > 0); 168666#L1238-14 assume ~currentFloorID~0 > 0; 170557#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171007#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162544#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 179579#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 179578#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164480#L1463-6 assume !(1 == ~currentHeading~0); 162603#L1473-18 assume !(0 == ~currentFloorID~0); 162568#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162174#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 162175#L2963-2 assume !(-1 == ~expectedDirection~0); 168105#L2975-2 assume !(1 == ~expectedDirection~0); 167938#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 167188#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 165425#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167053#L2485-1 assume 0 == initPersonOnFloor_~floor; 170032#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 162799#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 166628#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 168363#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171919#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171918#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171867#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171818#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163414#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 170785#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 170786#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 171741#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 171740#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171443#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 167922#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 167923#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168624#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 166631#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 166632#L1675-3 assume !(0 != timeShift_~tmp___9~2); 167361#L1766-9 assume !(1 == ~doorState~0); 170624#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170128#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164122#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164123#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168745#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168763#L1217-20 assume !(0 == ~currentFloorID~0); 168649#L1223-20 assume !(~currentFloorID~0 > 0); 168650#L1238-20 assume ~currentFloorID~0 > 0; 170550#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171028#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162524#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 178616#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 178615#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164451#L1463-9 assume !(1 == ~currentHeading~0); 162556#L1473-27 assume !(0 == ~currentFloorID~0); 162517#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162479#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 178637#L2963-3 assume !(-1 == ~expectedDirection~0); 178630#L2975-3 assume !(1 == ~expectedDirection~0); 178625#L2976-3 cleanup_~i~0 := 0; 178624#L188-2 [2018-12-09 06:43:05,021 INFO L796 eck$LassoCheckResult]: Loop: 178624#L188-2 assume !false; 178623#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 178622#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 178621#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 178620#L196 assume 1 != cleanup_~tmp___0~0; 178619#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 166056#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 165092#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 162312#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 162313#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 169214#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 169528#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171800#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171799#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171797#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171342#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 171341#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 171340#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 171339#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 171313#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 171303#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 171300#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171291#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 171289#L861-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 171284#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 171283#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 171282#L1675-4 assume !(0 != timeShift_~tmp___9~2); 171280#L1766-12 assume !(1 == ~doorState~0); 171279#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 171263#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 171260#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 171258#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 171241#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 171228#L1217-26 assume !(0 == ~currentFloorID~0); 168634#L1223-26 assume !(~currentFloorID~0 > 0); 168635#L1238-26 assume ~currentFloorID~0 > 0; 170545#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171023#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162316#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 178618#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 178617#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164460#L1463-12 assume !(1 == ~currentHeading~0); 162480#L1473-36 assume !(0 == ~currentFloorID~0); 162481#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162453#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 178633#L2963-4 assume !(-1 == ~expectedDirection~0); 178628#L2975-4 assume !(1 == ~expectedDirection~0); 178626#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 178624#L188-2 [2018-12-09 06:43:05,029 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:05,029 INFO L82 PathProgramCache]: Analyzing trace with hash -1283546667, now seen corresponding path program 1 times [2018-12-09 06:43:05,030 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:05,031 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:05,032 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:05,032 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:05,032 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:05,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:05,086 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:05,087 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:05,087 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:05,087 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:05,087 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:05,087 INFO L82 PathProgramCache]: Analyzing trace with hash 605476013, now seen corresponding path program 1 times [2018-12-09 06:43:05,087 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:05,087 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:05,088 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:05,088 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:05,088 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:05,094 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:05,120 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:05,120 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:05,121 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 06:43:05,121 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:05,121 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 06:43:05,121 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 06:43:05,121 INFO L87 Difference]: Start difference. First operand 17507 states and 32458 transitions. cyclomatic complexity: 14952 Second operand 5 states. [2018-12-09 06:43:08,693 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:08,693 INFO L93 Difference]: Finished difference Result 50416 states and 92763 transitions. [2018-12-09 06:43:08,693 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 06:43:08,693 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50416 states and 92763 transitions. [2018-12-09 06:43:08,810 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12903 [2018-12-09 06:43:08,900 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50416 states to 50350 states and 92691 transitions. [2018-12-09 06:43:08,900 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50350 [2018-12-09 06:43:08,923 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50350 [2018-12-09 06:43:08,923 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50350 states and 92691 transitions. [2018-12-09 06:43:08,943 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:08,943 INFO L705 BuchiCegarLoop]: Abstraction has 50350 states and 92691 transitions. [2018-12-09 06:43:08,964 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50350 states and 92691 transitions. [2018-12-09 06:43:09,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50350 to 26326. [2018-12-09 06:43:09,148 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26326 states. [2018-12-09 06:43:09,176 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26326 states to 26326 states and 48334 transitions. [2018-12-09 06:43:09,177 INFO L728 BuchiCegarLoop]: Abstraction has 26326 states and 48334 transitions. [2018-12-09 06:43:09,177 INFO L608 BuchiCegarLoop]: Abstraction has 26326 states and 48334 transitions. [2018-12-09 06:43:09,177 INFO L442 BuchiCegarLoop]: ======== Iteration 6============ [2018-12-09 06:43:09,177 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26326 states and 48334 transitions. [2018-12-09 06:43:09,224 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6615 [2018-12-09 06:43:09,224 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:09,224 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:09,227 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:09,227 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:09,227 INFO L794 eck$LassoCheckResult]: Stem: 234076#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 234077#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 232011#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 232012#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 232545#L385 assume 0 != main_~tmp~8; 238477#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 235305#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 235163#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 233384#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 235032#L2485 assume 0 == initPersonOnFloor_~floor; 238188#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 230776#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 234620#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236399#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 237782#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 237783#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 239006#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 239026#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 236096#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 236097#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 238149#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 230731#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 233097#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 233098#L2214 assume !(0 == isFloorCalling_~floorID); 235715#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 232988#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 234594#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 235245#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234616#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234617#L1675 assume !(0 != timeShift_~tmp___9~2); 235357#L1766 assume !(1 == ~doorState~0); 238526#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238212#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232100#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232101#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236763#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 235968#L1217-2 assume !(0 == ~currentFloorID~0); 235969#L1223-2 assume !(~currentFloorID~0 > 0); 236490#L1238-2 assume ~currentFloorID~0 > 0; 238651#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239163#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230570#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 240272#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 240271#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 232468#L1463 assume !(1 == ~currentHeading~0); 230822#L1473 assume !(0 == ~currentFloorID~0); 230823#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230557#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 239269#L2963 assume !(-1 == ~expectedDirection~0); 239266#L2975 assume !(1 == ~expectedDirection~0); 239264#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 239263#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 239261#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 239258#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 239259#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239262#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238715#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 238716#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 244486#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 244485#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 244484#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 236019#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 236020#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 236358#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234618#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234619#L1675-1 assume !(0 != timeShift_~tmp___9~2); 235362#L1766-3 assume !(1 == ~doorState~0); 238525#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238217#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232105#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232106#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236771#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 236811#L1217-8 assume !(0 == ~currentFloorID~0); 236712#L1223-8 assume !(~currentFloorID~0 > 0); 236713#L1238-8 assume ~currentFloorID~0 > 0; 238631#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239159#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230635#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 256246#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 256247#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 232438#L1463-3 assume !(1 == ~currentHeading~0); 230560#L1473-9 assume !(0 == ~currentFloorID~0); 230561#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230533#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 240496#L2963-1 assume !(-1 == ~expectedDirection~0); 240493#L2975-1 assume !(1 == ~expectedDirection~0); 240491#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240490#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 240489#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 240488#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 240270#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 231378#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240435#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 240420#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 240411#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 240406#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240401#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 240398#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 240392#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240394#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 241976#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 241970#L1675-2 assume !(0 != timeShift_~tmp___9~2); 235336#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 238537#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238221#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232110#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232111#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236779#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 239274#L1217-14 assume !(0 == ~currentFloorID~0); 236663#L1223-14 assume !(~currentFloorID~0 > 0); 236665#L1238-14 assume ~currentFloorID~0 > 0; 238622#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239154#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230492#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 237179#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 239106#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256383#L1463-6 assume !(1 == ~currentHeading~0); 230552#L1473-18 assume !(0 == ~currentFloorID~0); 230517#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230496#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 240560#L2963-2 assume !(-1 == ~expectedDirection~0); 240557#L2975-2 assume !(1 == ~expectedDirection~0); 240555#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 240554#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 240547#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 240546#L2485-1 assume 0 == initPersonOnFloor_~floor; 240529#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 240512#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 240509#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 240506#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240505#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 240504#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 240502#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 240503#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239353#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240440#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 240428#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 240416#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 240409#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240405#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 240400#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 240396#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238836#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234602#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234603#L1675-3 assume !(0 != timeShift_~tmp___9~2); 235340#L1766-9 assume !(1 == ~doorState~0); 250515#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 250508#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 250500#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 250494#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 249161#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 239272#L1217-20 assume !(0 == ~currentFloorID~0); 236648#L1223-20 assume !(~currentFloorID~0 > 0); 236649#L1238-20 assume ~currentFloorID~0 > 0; 238615#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239175#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230605#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 250633#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 250634#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256125#L1463-9 assume !(1 == ~currentHeading~0); 230505#L1473-27 assume !(0 == ~currentFloorID~0); 230462#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230422#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 248969#L2963-3 assume !(-1 == ~expectedDirection~0); 248962#L2975-3 assume !(1 == ~expectedDirection~0); 248960#L2976-3 cleanup_~i~0 := 0; 248959#L188-2 [2018-12-09 06:43:09,233 INFO L796 eck$LassoCheckResult]: Loop: 248959#L188-2 assume !false; 248958#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 248957#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 248956#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 248955#L196 assume 1 != cleanup_~tmp___0~0; 248954#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 248951#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 248932#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 248927#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 248913#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 248912#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 248911#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 248910#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 248909#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 248907#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 246202#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239349#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238824#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 238825#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 248881#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 248879#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 237787#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 237788#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 248877#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238818#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234604#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234605#L1675-4 assume !(0 != timeShift_~tmp___9~2); 235344#L1766-12 assume !(1 == ~doorState~0); 238672#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238209#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232095#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232096#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236748#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 236749#L1217-26 assume !(0 == ~currentFloorID~0); 236633#L1223-26 assume !(~currentFloorID~0 > 0); 236634#L1238-26 assume ~currentFloorID~0 > 0; 238610#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239170#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230258#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 237175#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 256089#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256088#L1463-12 assume !(1 == ~currentHeading~0); 230424#L1473-36 assume !(0 == ~currentFloorID~0); 230425#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230396#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 248971#L2963-4 assume !(-1 == ~expectedDirection~0); 248966#L2975-4 assume !(1 == ~expectedDirection~0); 248961#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 248959#L188-2 [2018-12-09 06:43:09,243 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:09,243 INFO L82 PathProgramCache]: Analyzing trace with hash -1283546667, now seen corresponding path program 2 times [2018-12-09 06:43:09,243 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:09,243 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:09,243 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:09,244 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:09,244 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:09,252 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:09,286 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:09,286 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:09,286 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:09,286 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:09,287 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:09,287 INFO L82 PathProgramCache]: Analyzing trace with hash 820928471, now seen corresponding path program 1 times [2018-12-09 06:43:09,287 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:09,287 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:09,287 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:09,287 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 06:43:09,287 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:09,292 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:09,313 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:09,313 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:09,313 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 06:43:09,313 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:09,314 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 06:43:09,314 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 06:43:09,314 INFO L87 Difference]: Start difference. First operand 26326 states and 48334 transitions. cyclomatic complexity: 22009 Second operand 5 states. [2018-12-09 06:43:11,210 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:11,210 INFO L93 Difference]: Finished difference Result 34265 states and 62765 transitions. [2018-12-09 06:43:11,210 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 06:43:11,211 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 34265 states and 62765 transitions. [2018-12-09 06:43:11,300 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8922 [2018-12-09 06:43:11,362 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 34265 states to 34211 states and 62711 transitions. [2018-12-09 06:43:11,362 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 34211 [2018-12-09 06:43:11,381 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 34211 [2018-12-09 06:43:11,381 INFO L73 IsDeterministic]: Start isDeterministic. Operand 34211 states and 62711 transitions. [2018-12-09 06:43:11,398 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:11,398 INFO L705 BuchiCegarLoop]: Abstraction has 34211 states and 62711 transitions. [2018-12-09 06:43:11,416 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 34211 states and 62711 transitions. [2018-12-09 06:43:11,588 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 34211 to 34063. [2018-12-09 06:43:11,588 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 34063 states. [2018-12-09 06:43:11,624 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 34063 states to 34063 states and 62475 transitions. [2018-12-09 06:43:11,624 INFO L728 BuchiCegarLoop]: Abstraction has 34063 states and 62475 transitions. [2018-12-09 06:43:11,624 INFO L608 BuchiCegarLoop]: Abstraction has 34063 states and 62475 transitions. [2018-12-09 06:43:11,624 INFO L442 BuchiCegarLoop]: ======== Iteration 7============ [2018-12-09 06:43:11,624 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 34063 states and 62475 transitions. [2018-12-09 06:43:11,685 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8859 [2018-12-09 06:43:11,685 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:11,685 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:11,688 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:11,688 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:11,689 INFO L794 eck$LassoCheckResult]: Stem: 294699#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 294700#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 292675#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 292676#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 293213#L385 assume 0 != main_~tmp~8; 299092#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 295953#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 295811#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 294044#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 295674#L2485 assume 0 == initPersonOnFloor_~floor; 298775#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 291400#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 295248#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 297037#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 298372#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 298373#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 299584#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 292006#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 292007#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 296709#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 291951#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 291353#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 293760#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 293761#L2214 assume !(0 == isFloorCalling_~floorID); 296368#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 293653#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 295224#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 295893#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 295244#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 295245#L1675 assume !(0 != timeShift_~tmp___9~2); 296011#L1766 assume !(1 == ~doorState~0); 299159#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 298803#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 292764#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 292765#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 297369#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 296605#L1217-2 assume !(0 == ~currentFloorID~0); 296606#L1223-2 assume ~currentFloorID~0 > 0; 297333#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 296376#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 294290#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 297121#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 291187#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 297791#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 299676#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 293136#L1463 assume !(1 == ~currentHeading~0); 291446#L1473 assume !(0 == ~currentFloorID~0); 291447#L1473-2 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 290756#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 290757#L2963 assume !(-1 == ~expectedDirection~0); 298169#L2975 assume !(1 == ~expectedDirection~0); 296647#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 296648#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 298374#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 299577#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 292014#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 292015#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 300377#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 300370#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 300366#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 300364#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 300363#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 300362#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 300360#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 300353#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 300352#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 300225#L1675-1 assume !(0 != timeShift_~tmp___9~2); 299864#L1766-3 assume !(1 == ~doorState~0); 299862#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 299863#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 299852#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 299853#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 300179#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 305164#L1217-8 assume !(0 == ~currentFloorID~0); 297322#L1223-8 assume ~currentFloorID~0 > 0; 297323#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 296300#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 293991#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 298060#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 291260#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 320540#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 320539#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 293106#L1463-3 assume !(1 == ~currentHeading~0); 291176#L1473-9 assume !(0 == ~currentFloorID~0); 291177#L1473-11 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 291147#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 323579#L2963-1 assume !(-1 == ~expectedDirection~0); 296727#L2975-1 assume !(1 == ~expectedDirection~0); 296641#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 296642#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 298379#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 299581#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 292021#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 292022#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 296978#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 314138#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 314121#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 313927#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 298380#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 296586#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 296587#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 296963#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 295228#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 295229#L1675-2 assume !(0 != timeShift_~tmp___9~2); 300342#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 300341#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 300334#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 300326#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 300324#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 300318#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 300319#L1217-14 assume !(0 == ~currentFloorID~0); 297287#L1223-14 assume ~currentFloorID~0 > 0; 297288#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 296333#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 294347#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 298017#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 291246#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 300281#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 300282#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 305650#L1463-6 assume !(1 == ~currentHeading~0); 305640#L1473-18 assume !(0 == ~currentFloorID~0); 291131#L1473-20 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 290725#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 290726#L2963-2 assume !(-1 == ~expectedDirection~0); 296733#L2975-2 assume !(1 == ~expectedDirection~0); 296570#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 295814#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 294047#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 295666#L2485-1 assume 0 == initPersonOnFloor_~floor; 298701#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 291381#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 295227#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 296996#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 298381#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 298382#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 299574#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 299659#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 300579#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 296949#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 317841#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 317842#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 323188#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 298383#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 296556#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 296557#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 297258#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 299445#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 300252#L1675-3 assume !(0 != timeShift_~tmp___9~2); 300249#L1766-9 assume !(1 == ~doorState~0); 300213#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 300190#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 300177#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 300162#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 300153#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 300130#L1217-20 assume !(0 == ~currentFloorID~0); 297277#L1223-20 assume ~currentFloorID~0 > 0; 297278#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 297391#L1238-20 assume ~currentFloorID~0 > 0; 299248#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 299750#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 291222#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 316467#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 316466#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 316465#L1463-9 assume !(1 == ~currentHeading~0); 316463#L1473-27 assume !(0 == ~currentFloorID~0); 291073#L1473-29 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 290708#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 290709#L2963-3 assume !(-1 == ~expectedDirection~0); 296745#L2975-3 assume !(1 == ~expectedDirection~0); 296579#L2976-3 cleanup_~i~0 := 0; 296580#L188-2 [2018-12-09 06:43:11,695 INFO L796 eck$LassoCheckResult]: Loop: 296580#L188-2 assume !false; 299642#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 299632#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 297571#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 297572#L196 assume 1 != cleanup_~tmp___0~0; 298714#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 294646#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 293711#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 290863#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 290864#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 297869#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 298188#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 298375#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 298376#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 299629#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 299660#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 304948#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 297179#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 312031#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 312005#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 312006#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 313310#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 313308#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 313298#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 297208#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 300259#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 300255#L1675-4 assume !(0 != timeShift_~tmp___9~2); 300251#L1766-12 assume !(1 == ~doorState~0); 300248#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 300210#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 300207#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 300186#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 300187#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 313230#L1217-26 assume !(0 == ~currentFloorID~0); 297267#L1223-26 assume ~currentFloorID~0 > 0; 297268#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 294556#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 294278#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 297656#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 290867#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 313326#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 313327#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 316349#L1463-12 assume !(1 == ~currentHeading~0); 291033#L1473-36 assume !(0 == ~currentFloorID~0); 291034#L1473-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 290691#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 290692#L2963-4 assume !(-1 == ~expectedDirection~0); 296740#L2975-4 assume !(1 == ~expectedDirection~0); 296588#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 296580#L188-2 [2018-12-09 06:43:11,705 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:11,705 INFO L82 PathProgramCache]: Analyzing trace with hash 1107623536, now seen corresponding path program 1 times [2018-12-09 06:43:11,705 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:11,705 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:11,705 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:11,706 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:11,706 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:11,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:11,742 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:11,742 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:11,742 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:11,743 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:11,743 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:11,743 INFO L82 PathProgramCache]: Analyzing trace with hash 2039249093, now seen corresponding path program 1 times [2018-12-09 06:43:11,743 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:11,743 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:11,743 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:11,743 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:11,743 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:11,747 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:11,764 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:11,764 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:11,764 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 06:43:11,764 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:11,764 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 06:43:11,764 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 06:43:11,764 INFO L87 Difference]: Start difference. First operand 34063 states and 62475 transitions. cyclomatic complexity: 28413 Second operand 5 states. [2018-12-09 06:43:12,380 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:12,380 INFO L93 Difference]: Finished difference Result 55679 states and 102175 transitions. [2018-12-09 06:43:12,381 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 06:43:12,381 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 55679 states and 102175 transitions. [2018-12-09 06:43:12,518 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17687 [2018-12-09 06:43:12,620 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 55679 states to 55674 states and 102170 transitions. [2018-12-09 06:43:12,620 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 55674 [2018-12-09 06:43:12,648 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 55674 [2018-12-09 06:43:12,648 INFO L73 IsDeterministic]: Start isDeterministic. Operand 55674 states and 102170 transitions. [2018-12-09 06:43:12,672 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:12,672 INFO L705 BuchiCegarLoop]: Abstraction has 55674 states and 102170 transitions. [2018-12-09 06:43:12,697 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 55674 states and 102170 transitions. [2018-12-09 06:43:13,006 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 55674 to 54862. [2018-12-09 06:43:13,006 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 54862 states. [2018-12-09 06:43:13,067 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 54862 states to 54862 states and 100836 transitions. [2018-12-09 06:43:13,067 INFO L728 BuchiCegarLoop]: Abstraction has 54862 states and 100836 transitions. [2018-12-09 06:43:13,067 INFO L608 BuchiCegarLoop]: Abstraction has 54862 states and 100836 transitions. [2018-12-09 06:43:13,067 INFO L442 BuchiCegarLoop]: ======== Iteration 8============ [2018-12-09 06:43:13,067 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 54862 states and 100836 transitions. [2018-12-09 06:43:13,169 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17329 [2018-12-09 06:43:13,169 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:13,169 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:13,174 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:13,174 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:13,174 INFO L794 eck$LassoCheckResult]: Stem: 384550#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 384551#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 382495#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 382496#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 383039#L385 assume 0 != main_~tmp~8; 389257#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 385874#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 385732#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 383876#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 385589#L2485 assume 0 == initPersonOnFloor_~floor; 388883#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 381156#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 385136#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 386996#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 388458#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 388459#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 389805#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 381784#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 381785#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 386665#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 381727#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 381728#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 383582#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 383583#L2214 assume !(0 == isFloorCalling_~floorID); 386296#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 383474#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 385112#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 385814#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 385132#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 385133#L1675 assume !(0 != timeShift_~tmp___9~2); 385933#L1766 assume !(1 == ~doorState~0); 389323#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 388915#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 382579#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 382580#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 387317#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 386565#L1217-2 assume !(0 == ~currentFloorID~0); 386566#L1223-2 assume ~currentFloorID~0 > 0; 387277#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 386306#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 384120#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 387066#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 380941#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 390041#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 390030#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 382960#L1463 assume !(1 == ~currentHeading~0); 381204#L1473 assume !(0 == ~currentFloorID~0); 381205#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380928#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 393093#L2963 assume !(-1 == ~expectedDirection~0); 392764#L2975 assume !(1 == ~expectedDirection~0); 392088#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 388460#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 388461#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 389796#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 391679#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 386634#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 386635#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 389515#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 391765#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 391763#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 391762#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 391761#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 391757#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 391758#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 418220#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 418218#L1675-1 assume !(0 != timeShift_~tmp___9~2); 391729#L1766-3 assume !(1 == ~doorState~0); 391728#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 391727#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 391722#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 391720#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 391642#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 391643#L1217-8 assume !(0 == ~currentFloorID~0); 387266#L1223-8 assume ~currentFloorID~0 > 0; 387267#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 386224#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 383824#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 388104#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 381006#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 391776#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 391777#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 382934#L1463-3 assume !(1 == ~currentHeading~0); 380931#L1473-9 assume !(0 == ~currentFloorID~0); 380932#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380904#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 393302#L2963-1 assume !(-1 == ~expectedDirection~0); 393299#L2975-1 assume !(1 == ~expectedDirection~0); 393212#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 393210#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 393211#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 393206#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 390022#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 391692#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 386938#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 381708#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 381710#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 383502#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 383504#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 386546#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 386547#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 386923#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 385116#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 385117#L1675-2 assume !(0 != timeShift_~tmp___9~2); 385912#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 423743#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 388929#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 382589#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 382590#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 387343#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 387378#L1217-14 assume !(0 == ~currentFloorID~0); 387232#L1223-14 assume ~currentFloorID~0 > 0; 387233#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 386258#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 384186#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 388056#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 380863#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 387764#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 389908#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 382943#L1463-6 assume !(1 == ~currentHeading~0); 380923#L1473-18 assume !(0 == ~currentFloorID~0); 380888#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380867#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 423552#L2963-2 assume !(-1 == ~expectedDirection~0); 423549#L2975-2 assume !(1 == ~expectedDirection~0); 423547#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 423546#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 423540#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 423539#L2485-1 assume 0 == initPersonOnFloor_~floor; 423521#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 423504#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 412577#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 412314#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 412312#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 412310#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 412308#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 392762#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 391712#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 386909#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 389643#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 411837#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 424601#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 424600#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 424599#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 424593#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 424588#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 424586#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 424585#L1675-3 assume !(0 != timeShift_~tmp___9~2); 411615#L1766-9 assume !(1 == ~doorState~0); 430701#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 430698#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 430695#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 430693#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 430694#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 433276#L1217-20 assume !(0 == ~currentFloorID~0); 387222#L1223-20 assume ~currentFloorID~0 > 0; 387223#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 387348#L1238-20 assume ~currentFloorID~0 > 0; 389414#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 390008#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 380976#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 432873#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 432874#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 382918#L1463-9 assume !(1 == ~currentHeading~0); 380876#L1473-27 assume !(0 == ~currentFloorID~0); 380833#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380469#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 380470#L2963-3 assume !(-1 == ~expectedDirection~0); 388217#L2975-3 assume !(1 == ~expectedDirection~0); 434657#L2976-3 cleanup_~i~0 := 0; 434656#L188-2 [2018-12-09 06:43:13,181 INFO L796 eck$LassoCheckResult]: Loop: 434656#L188-2 assume !false; 389897#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 389863#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 387523#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 387524#L196 assume 1 != cleanup_~tmp___0~0; 423768#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 384497#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 383540#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 380624#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 380625#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 387875#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 388256#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 409814#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 409813#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 409812#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 400935#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 402739#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 402735#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 402726#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 402725#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 402724#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 402723#L1525-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 402720#L2214-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 402713#L2241-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 402699#L1496-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 402698#L1508-4 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 402696#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 402693#L1675-4 assume !(0 != timeShift_~tmp___9~2); 402679#L1766-12 assume !(1 == ~doorState~0); 402677#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 402678#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 434000#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 433999#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 400884#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 400885#L1217-26 assume !(0 == ~currentFloorID~0); 400866#L1223-26 assume !(~currentFloorID~0 > 0); 400862#L1238-26 assume ~currentFloorID~0 > 0; 389409#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 390011#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 400803#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 430976#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 430975#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 382924#L1463-12 assume !(1 == ~currentHeading~0); 380793#L1473-36 assume !(0 == ~currentFloorID~0); 380794#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 380452#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 380453#L2963-4 assume !(-1 == ~expectedDirection~0); 388213#L2975-4 assume !(1 == ~expectedDirection~0); 434658#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 434656#L188-2 [2018-12-09 06:43:13,191 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:13,191 INFO L82 PathProgramCache]: Analyzing trace with hash -2789324, now seen corresponding path program 1 times [2018-12-09 06:43:13,191 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:13,191 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:13,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:13,192 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:13,192 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:13,200 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:13,231 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:13,232 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:13,232 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:13,232 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:13,232 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:13,232 INFO L82 PathProgramCache]: Analyzing trace with hash 235615282, now seen corresponding path program 1 times [2018-12-09 06:43:13,232 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:13,232 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:13,232 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:13,233 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:13,233 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:13,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:13,256 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:13,256 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:13,256 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2018-12-09 06:43:13,256 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:13,256 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2018-12-09 06:43:13,256 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2018-12-09 06:43:13,256 INFO L87 Difference]: Start difference. First operand 54862 states and 100836 transitions. cyclomatic complexity: 45975 Second operand 7 states. [2018-12-09 06:43:13,947 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:13,948 INFO L93 Difference]: Finished difference Result 119496 states and 221365 transitions. [2018-12-09 06:43:13,948 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2018-12-09 06:43:13,948 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 119496 states and 221365 transitions. [2018-12-09 06:43:14,266 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 38280 [2018-12-09 06:43:14,505 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 119496 states to 119496 states and 221365 transitions. [2018-12-09 06:43:14,505 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 119496 [2018-12-09 06:43:14,573 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 119496 [2018-12-09 06:43:14,573 INFO L73 IsDeterministic]: Start isDeterministic. Operand 119496 states and 221365 transitions. [2018-12-09 06:43:14,627 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:14,627 INFO L705 BuchiCegarLoop]: Abstraction has 119496 states and 221365 transitions. [2018-12-09 06:43:14,683 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 119496 states and 221365 transitions. [2018-12-09 06:43:15,320 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 119496 to 53655. [2018-12-09 06:43:15,320 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53655 states. [2018-12-09 06:43:15,378 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53655 states to 53655 states and 98888 transitions. [2018-12-09 06:43:15,378 INFO L728 BuchiCegarLoop]: Abstraction has 53655 states and 98888 transitions. [2018-12-09 06:43:15,378 INFO L608 BuchiCegarLoop]: Abstraction has 53655 states and 98888 transitions. [2018-12-09 06:43:15,378 INFO L442 BuchiCegarLoop]: ======== Iteration 9============ [2018-12-09 06:43:15,378 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53655 states and 98888 transitions. [2018-12-09 06:43:15,477 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 16553 [2018-12-09 06:43:15,477 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:15,477 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:15,482 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:15,482 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:15,482 INFO L794 eck$LassoCheckResult]: Stem: 558987#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 558988#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 556932#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 556933#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 557478#L385 assume 0 != main_~tmp~8; 563732#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 560345#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 560198#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 558306#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 560047#L2485 assume 0 == initPersonOnFloor_~floor; 563342#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 555581#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 559585#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 561480#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 562917#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 562918#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 564287#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 556206#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 556207#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 561153#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 556154#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 556155#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 558018#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 558020#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 561136#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 561137#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 561948#L869-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 561529#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 564012#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 564533#L1675 assume !(0 != timeShift_~tmp___9~2); 563817#L1766 assume !(1 == ~doorState~0); 563799#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 563373#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 557018#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 557019#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 561801#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 561055#L1217-2 assume !(0 == ~currentFloorID~0); 561056#L1223-2 assume ~currentFloorID~0 > 0; 561760#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 560784#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 558551#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 561550#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 555347#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 564561#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 564526#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 557395#L1463 assume !(1 == ~currentHeading~0); 555629#L1473 assume !(0 == ~currentFloorID~0); 555630#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 555334#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 565190#L2963 assume !(-1 == ~expectedDirection~0); 565187#L2975 assume !(1 == ~expectedDirection~0); 565185#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 565184#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 565183#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 565182#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 565180#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 565181#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 568197#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 568194#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 568193#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 557934#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 557936#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 568207#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 568204#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 568205#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 572086#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 568175#L1675-1 assume !(0 != timeShift_~tmp___9~2); 563797#L1766-3 assume !(1 == ~doorState~0); 563798#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 563380#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 557023#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 557024#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 561813#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 561883#L1217-8 assume !(0 == ~currentFloorID~0); 561749#L1223-8 assume ~currentFloorID~0 > 0; 561750#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 560688#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 558252#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 562586#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 555290#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 562229#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 564377#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 557367#L1463-3 assume !(1 == ~currentHeading~0); 555337#L1473-9 assume !(0 == ~currentFloorID~0); 555338#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 555310#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 567345#L2963-1 assume !(-1 == ~expectedDirection~0); 567344#L2975-1 assume !(1 == ~expectedDirection~0); 567335#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 567336#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 567328#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 567329#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 564504#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 556222#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 561422#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 569314#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 569312#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 568315#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 568317#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 573161#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 573051#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 561407#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 572186#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 572187#L1675-2 assume !(0 != timeShift_~tmp___9~2); 571289#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 571151#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 571145#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 571141#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 571134#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 571135#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 571150#L1217-14 assume !(0 == ~currentFloorID~0); 571009#L1223-14 assume ~currentFloorID~0 > 0; 571008#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 560725#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 558617#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 564266#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 555404#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 572247#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 572248#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 557377#L1463-6 assume !(1 == ~currentHeading~0); 555329#L1473-18 assume !(0 == ~currentFloorID~0); 555294#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 555273#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 586887#L2963-2 assume !(-1 == ~expectedDirection~0); 586884#L2975-2 assume !(1 == ~expectedDirection~0); 586882#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 586881#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 586875#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 586874#L2485-1 assume 0 == initPersonOnFloor_~floor; 586856#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 586839#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 585959#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 585955#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 585953#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 585951#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 585950#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 581928#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 585948#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 585943#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 585939#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 585938#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 585936#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 585935#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 585934#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 585932#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 561685#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 593875#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 593876#L1675-3 assume !(0 != timeShift_~tmp___9~2); 563972#L1766-9 assume !(1 == ~doorState~0); 563973#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 563366#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 557008#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 557009#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 561779#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 561802#L1217-20 assume !(0 == ~currentFloorID~0); 578356#L1223-20 assume ~currentFloorID~0 > 0; 578355#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 564258#L1238-20 assume ~currentFloorID~0 > 0; 578297#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 564467#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 555246#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 586967#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 586901#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 557349#L1463-9 assume !(1 == ~currentHeading~0); 555282#L1473-27 assume !(0 == ~currentFloorID~0); 555239#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 555197#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 577428#L2963-3 assume !(-1 == ~expectedDirection~0); 577421#L2975-3 assume !(1 == ~expectedDirection~0); 577419#L2976-3 cleanup_~i~0 := 0; 577418#L188-2 [2018-12-09 06:43:15,490 INFO L796 eck$LassoCheckResult]: Loop: 577418#L188-2 assume !false; 577407#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 577396#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 577227#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 577226#L196 assume 1 != cleanup_~tmp___0~0; 577225#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 577222#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 577207#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 577198#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 577184#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 577183#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 577182#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 577181#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 577180#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 577179#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 577017#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 577175#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 577171#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 577168#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 577167#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 577165#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 577166#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 577279#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 577277#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 577146#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 577147#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 605310#L1675-4 assume !(0 != timeShift_~tmp___9~2); 576965#L1766-12 assume !(1 == ~doorState~0); 576964#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 576961#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 576958#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 576956#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 576957#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 579117#L1217-26 assume !(0 == ~currentFloorID~0); 579759#L1223-26 assume ~currentFloorID~0 > 0; 561807#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 561808#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 580075#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 576532#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 576533#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 579104#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 579101#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 573689#L1463-12 assume !(1 == ~currentHeading~0); 555198#L1473-36 assume !(0 == ~currentFloorID~0); 555199#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 555168#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 577430#L2963-4 assume !(-1 == ~expectedDirection~0); 577425#L2975-4 assume !(1 == ~expectedDirection~0); 577420#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 577418#L188-2 [2018-12-09 06:43:15,500 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:15,500 INFO L82 PathProgramCache]: Analyzing trace with hash -458575955, now seen corresponding path program 1 times [2018-12-09 06:43:15,500 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:15,500 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:15,500 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:15,500 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:15,500 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:15,509 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:15,535 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:15,536 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:15,536 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:15,536 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:15,536 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:15,536 INFO L82 PathProgramCache]: Analyzing trace with hash 2041096135, now seen corresponding path program 1 times [2018-12-09 06:43:15,536 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:15,536 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:15,536 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:15,537 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:15,537 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:15,541 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:15,554 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:15,554 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:15,554 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2018-12-09 06:43:15,554 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:15,554 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2018-12-09 06:43:15,554 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2018-12-09 06:43:15,555 INFO L87 Difference]: Start difference. First operand 53655 states and 98888 transitions. cyclomatic complexity: 45238 Second operand 3 states. [2018-12-09 06:43:15,801 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:15,801 INFO L93 Difference]: Finished difference Result 68417 states and 126072 transitions. [2018-12-09 06:43:15,801 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2018-12-09 06:43:15,801 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 68417 states and 126072 transitions. [2018-12-09 06:43:15,975 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 20516 [2018-12-09 06:43:16,101 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 68417 states to 68417 states and 126072 transitions. [2018-12-09 06:43:16,102 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 68417 [2018-12-09 06:43:16,139 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 68417 [2018-12-09 06:43:16,139 INFO L73 IsDeterministic]: Start isDeterministic. Operand 68417 states and 126072 transitions. [2018-12-09 06:43:16,171 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:16,171 INFO L705 BuchiCegarLoop]: Abstraction has 68417 states and 126072 transitions. [2018-12-09 06:43:16,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 68417 states and 126072 transitions. [2018-12-09 06:43:16,539 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 68417 to 66991. [2018-12-09 06:43:16,539 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 66991 states. [2018-12-09 06:43:16,610 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 66991 states to 66991 states and 123598 transitions. [2018-12-09 06:43:16,610 INFO L728 BuchiCegarLoop]: Abstraction has 66991 states and 123598 transitions. [2018-12-09 06:43:16,610 INFO L608 BuchiCegarLoop]: Abstraction has 66991 states and 123598 transitions. [2018-12-09 06:43:16,610 INFO L442 BuchiCegarLoop]: ======== Iteration 10============ [2018-12-09 06:43:16,610 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 66991 states and 123598 transitions. [2018-12-09 06:43:16,731 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 19716 [2018-12-09 06:43:16,731 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:16,731 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:16,737 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:16,737 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:16,737 INFO L794 eck$LassoCheckResult]: Stem: 681070#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 681071#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 679016#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 679017#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 679571#L385 assume 0 != main_~tmp~8; 685960#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 682423#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 682276#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 680402#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 682123#L2485 assume 0 == initPersonOnFloor_~floor; 685555#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 677669#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 681669#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 683585#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 685119#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 685120#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 686545#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 678294#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 678295#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 683258#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 678242#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 678243#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 680114#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 680116#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 683238#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 683239#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 684065#L869-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 683634#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 686237#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 688315#L1675 assume !(0 != timeShift_~tmp___9~2); 686044#L1766 assume !(1 == ~doorState~0); 686026#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 685585#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 679102#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 679103#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 683908#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 683157#L1217-2 assume !(0 == ~currentFloorID~0); 683158#L1223-2 assume ~currentFloorID~0 > 0; 683868#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 682879#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 680647#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 683655#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 677427#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 687977#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 687976#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 687975#L1463 assume !(1 == ~currentHeading~0); 687972#L1473 assume !(0 == ~currentFloorID~0); 687969#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 687547#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 687966#L2963 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 687902#L896-1 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 687900#L2967 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 687893#L2975 assume !(1 == ~expectedDirection~0); 687530#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 687529#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 687528#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 687527#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 687526#L2894-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 687525#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 687524#L2915-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 687519#L2926-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 687517#L2937-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 687515#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 687511#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 687509#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 687504#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 687502#L865-22 assume !(1 == buttonForFloorIsPressed_~floorID); 687499#L869-22 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 687495#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 687494#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 687491#L1675-1 assume !(0 != timeShift_~tmp___9~2); 687490#L1766-3 assume !(1 == ~doorState~0); 687488#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 687486#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 687479#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 687475#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 687476#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 687489#L1217-8 assume !(0 == ~currentFloorID~0); 688469#L1223-8 assume !(~currentFloorID~0 > 0); 688351#L1238-8 assume ~currentFloorID~0 > 0; 686140#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 686703#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 677369#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 701017#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 691766#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 691765#L1463-3 assume !(1 == ~currentHeading~0); 677417#L1473-9 assume !(0 == ~currentFloorID~0); 677418#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 677389#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 695590#L2963-1 assume !(-1 == ~expectedDirection~0); 695591#L2975-1 assume !(1 == ~expectedDirection~0); 695486#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 695487#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 695482#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 695483#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 686776#L2894-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 695479#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 695551#L2915-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 695550#L2926-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 695549#L2937-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 695548#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 695546#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 695545#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 695542#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 695544#L865-34 assume !(1 == buttonForFloorIsPressed_~floorID); 695536#L869-34 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 695535#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 695527#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 695528#L1675-2 assume !(0 != timeShift_~tmp___9~2); 697852#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 703599#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 703440#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 703432#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 703429#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 703427#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 703428#L1217-14 assume !(0 == ~currentFloorID~0); 705122#L1223-14 assume !(~currentFloorID~0 > 0); 705120#L1238-14 assume ~currentFloorID~0 > 0; 686127#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 686698#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 705057#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 705049#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 705050#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 703186#L1463-6 assume !(1 == ~currentHeading~0); 702714#L1473-18 assume !(0 == ~currentFloorID~0); 679220#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 697060#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 723066#L2963-2 assume !(-1 == ~expectedDirection~0); 723064#L2975-2 assume !(1 == ~expectedDirection~0); 723061#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 723060#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 723054#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 723053#L2485-1 assume 0 == initPersonOnFloor_~floor; 723035#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 723018#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 719713#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 692812#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 692813#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 692739#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 692740#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 692390#L2894-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 692388#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 692385#L2915-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 692383#L2926-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 692381#L2937-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 692377#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 692374#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 692371#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 692370#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 692369#L865-46 assume !(1 == buttonForFloorIsPressed_~floorID); 692363#L869-46 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 692362#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 692358#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 692356#L1675-3 assume !(0 != timeShift_~tmp___9~2); 692354#L1766-9 assume !(1 == ~doorState~0); 692353#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 692350#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 692347#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 692345#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 692346#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 692502#L1217-20 assume !(0 == ~currentFloorID~0); 719405#L1223-20 assume !(~currentFloorID~0 > 0); 719404#L1238-20 assume ~currentFloorID~0 > 0; 686119#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 686761#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 719323#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 729365#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 729357#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 729355#L1463-9 assume !(1 == ~currentHeading~0); 688296#L1473-27 assume !(0 == ~currentFloorID~0); 679215#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 714144#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 728873#L2963-3 assume !(-1 == ~expectedDirection~0); 728871#L2975-3 assume !(1 == ~expectedDirection~0); 728860#L2976-3 cleanup_~i~0 := 0; 728859#L188-2 [2018-12-09 06:43:16,745 INFO L796 eck$LassoCheckResult]: Loop: 728859#L188-2 assume !false; 728858#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 728857#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 728852#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 728850#L196 assume 1 != cleanup_~tmp___0~0; 728849#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 727067#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 727063#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 727061#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 727046#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 727044#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 727043#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 727042#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 727041#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 727040#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 708049#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 703569#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 703567#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 703563#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 703560#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 703559#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 703557#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 703558#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 703565#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 703562#L865-58 assume !(1 == buttonForFloorIsPressed_~floorID); 703548#L869-58 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 703532#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 703530#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 703528#L1675-4 assume !(0 != timeShift_~tmp___9~2); 703527#L1766-12 assume !(1 == ~doorState~0); 703526#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 703521#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 703518#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 703516#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 703517#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 703613#L1217-26 assume !(0 == ~currentFloorID~0); 684104#L1223-26 assume !(~currentFloorID~0 > 0); 736963#L1238-26 assume ~currentFloorID~0 > 0; 686112#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 686758#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 726791#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 742051#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 742048#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 679446#L1463-12 assume !(1 == ~currentHeading~0); 677278#L1473-36 assume !(0 == ~currentFloorID~0); 677279#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 677248#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 728866#L2963-4 assume !(-1 == ~expectedDirection~0); 728867#L2975-4 assume !(1 == ~expectedDirection~0); 728861#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 728859#L188-2 [2018-12-09 06:43:16,753 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:16,753 INFO L82 PathProgramCache]: Analyzing trace with hash -520935484, now seen corresponding path program 1 times [2018-12-09 06:43:16,755 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:16,755 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:16,755 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:16,755 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:16,755 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:16,763 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:16,796 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:16,796 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:16,796 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:16,796 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:16,797 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:16,797 INFO L82 PathProgramCache]: Analyzing trace with hash -21397838, now seen corresponding path program 1 times [2018-12-09 06:43:16,797 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:16,797 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:16,797 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:16,797 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:16,797 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:16,800 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:16,838 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:16,838 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:16,838 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-12-09 06:43:16,838 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:16,838 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-12-09 06:43:16,838 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-12-09 06:43:16,839 INFO L87 Difference]: Start difference. First operand 66991 states and 123598 transitions. cyclomatic complexity: 56612 Second operand 8 states. [2018-12-09 06:43:25,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:25,206 INFO L93 Difference]: Finished difference Result 154831 states and 285729 transitions. [2018-12-09 06:43:25,206 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-12-09 06:43:25,207 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 154831 states and 285729 transitions. [2018-12-09 06:43:25,605 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 46143 [2018-12-09 06:43:25,910 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 154831 states to 154831 states and 285729 transitions. [2018-12-09 06:43:25,910 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 154831 [2018-12-09 06:43:25,997 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 154831 [2018-12-09 06:43:25,998 INFO L73 IsDeterministic]: Start isDeterministic. Operand 154831 states and 285729 transitions. [2018-12-09 06:43:26,068 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:26,068 INFO L705 BuchiCegarLoop]: Abstraction has 154831 states and 285729 transitions. [2018-12-09 06:43:26,140 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 154831 states and 285729 transitions. [2018-12-09 06:43:28,611 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 154831 to 80130. [2018-12-09 06:43:28,611 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80130 states. [2018-12-09 06:43:28,694 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80130 states to 80130 states and 148083 transitions. [2018-12-09 06:43:28,695 INFO L728 BuchiCegarLoop]: Abstraction has 80130 states and 148083 transitions. [2018-12-09 06:43:28,695 INFO L608 BuchiCegarLoop]: Abstraction has 80130 states and 148083 transitions. [2018-12-09 06:43:28,695 INFO L442 BuchiCegarLoop]: ======== Iteration 11============ [2018-12-09 06:43:28,695 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 80130 states and 148083 transitions. [2018-12-09 06:43:28,838 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 23317 [2018-12-09 06:43:28,838 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:28,838 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:28,845 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:28,845 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:28,846 INFO L794 eck$LassoCheckResult]: Stem: 902864#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 902865#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 900807#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 900808#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 901356#L385 assume 0 != main_~tmp~8; 907477#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 904138#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 903991#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 902189#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 903855#L2485 assume 0 == initPersonOnFloor_~floor; 907107#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 899481#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 903420#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 905252#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 906686#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 906687#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 908044#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 900083#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 900084#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 904922#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 900031#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 900032#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 901905#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 901907#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 904903#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 904904#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 905746#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 905300#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 905301#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 907759#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 909147#L1675 assume !(0 != timeShift_~tmp___9~2); 907559#L1766 assume !(1 == ~doorState~0); 907541#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 907139#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 900896#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 900897#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 905584#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 904818#L1217-2 assume !(0 == ~currentFloorID~0); 904819#L1223-2 assume ~currentFloorID~0 > 0; 905541#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 904564#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902436#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 905322#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 899275#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 909053#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 909054#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 901281#L1463 assume !(1 == ~currentHeading~0); 899525#L1473 assume !(0 == ~currentFloorID~0); 899526#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899262#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 908367#L2963 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 908363#L896-1 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 908361#L2967 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 908352#L2975 assume !(1 == ~expectedDirection~0); 908350#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 908349#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 908348#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 908347#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 908346#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 904889#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 904890#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 900038#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 900039#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 957073#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 957072#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 904872#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 904873#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 957067#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 956373#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 956374#L1675-1 assume !(0 != timeShift_~tmp___9~2); 907539#L1766-3 assume !(1 == ~doorState~0); 907540#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 907144#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 900901#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 900902#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 905595#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 905666#L1217-8 assume !(0 == ~currentFloorID~0); 905528#L1223-8 assume ~currentFloorID~0 > 0; 905529#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 904473#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902136#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 906361#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 899219#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 957930#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 957929#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 901253#L1463-3 assume !(1 == ~currentHeading~0); 899265#L1473-9 assume !(0 == ~currentFloorID~0); 899266#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 898844#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 898845#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 906539#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 906488#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 906489#L2975-1 assume !(1 == ~expectedDirection~0); 913641#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 913640#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 912810#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 912809#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 908244#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 952966#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 952958#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 952955#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 952956#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 957914#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 957912#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 957913#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 957907#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 957909#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 903400#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 903401#L1675-2 assume !(0 != timeShift_~tmp___9~2); 907552#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 907553#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 907150#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 906781#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 905605#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 905607#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 957612#L1217-14 assume !(0 == ~currentFloorID~0); 957611#L1223-14 assume ~currentFloorID~0 > 0; 957610#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 904507#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902499#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 906312#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 899199#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 957984#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 957975#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 901263#L1463-6 assume !(1 == ~currentHeading~0); 899257#L1473-18 assume !(0 == ~currentFloorID~0); 899221#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 898830#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 898831#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 906543#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 951982#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 951968#L2975-2 assume !(1 == ~expectedDirection~0); 951966#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 951965#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 951959#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 951958#L2485-1 assume 0 == initPersonOnFloor_~floor; 951940#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 951923#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 949942#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 949940#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 928723#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 928718#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 928706#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 928707#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 959873#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 959865#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 959862#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 959863#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 968529#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 906696#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 906697#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 968508#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 905461#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 903402#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 903403#L1675-3 assume !(0 != timeShift_~tmp___9~2); 957983#L1766-9 assume !(1 == ~doorState~0); 907716#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 907717#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 959791#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 959789#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 959790#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 905797#L1217-20 assume !(0 == ~currentFloorID~0); 905480#L1223-20 assume ~currentFloorID~0 > 0; 905481#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 905617#L1238-20 assume ~currentFloorID~0 > 0; 967774#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 908224#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 899179#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 968496#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 968495#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 901239#L1463-9 assume !(1 == ~currentHeading~0); 899211#L1473-27 assume !(0 == ~currentFloorID~0); 899172#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 898813#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 898814#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 906547#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 906466#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 906467#L2975-3 assume !(1 == ~expectedDirection~0); 957985#L2976-3 cleanup_~i~0 := 0; 957974#L188-2 [2018-12-09 06:43:28,856 INFO L796 eck$LassoCheckResult]: Loop: 957974#L188-2 assume !false; 957973#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 957972#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 957971#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 957970#L196 assume 1 != cleanup_~tmp___0~0; 957969#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 957966#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 957959#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 957946#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 957932#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 957931#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 928721#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 928722#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 928704#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 928705#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 916041#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 916042#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 970453#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 970449#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 970445#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 970440#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 970441#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 977957#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 977956#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 977952#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 977945#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 977898#L1675-4 assume !(0 != timeShift_~tmp___9~2); 907718#L1766-12 assume !(1 == ~doorState~0); 907719#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 907136#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 900891#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 900892#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 905568#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 905569#L1217-26 assume !(0 == ~currentFloorID~0); 905470#L1223-26 assume ~currentFloorID~0 > 0; 905471#L1224-26 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 905591#L1238-26 assume ~currentFloorID~0 > 0; 907629#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 908217#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 898972#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 978909#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 978908#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 901245#L1463-12 assume !(1 == ~currentHeading~0); 899135#L1473-36 assume !(0 == ~currentFloorID~0); 899136#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 899109#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 968497#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 958931#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 958937#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 958919#L2975-4 assume !(1 == ~expectedDirection~0); 957986#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 957974#L188-2 [2018-12-09 06:43:28,865 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:28,865 INFO L82 PathProgramCache]: Analyzing trace with hash 770343526, now seen corresponding path program 1 times [2018-12-09 06:43:28,865 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:28,865 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:28,866 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:28,866 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:28,866 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:28,873 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:28,900 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:28,900 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:28,900 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:28,901 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:28,901 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:28,901 INFO L82 PathProgramCache]: Analyzing trace with hash -1450126491, now seen corresponding path program 1 times [2018-12-09 06:43:28,901 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:28,901 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:28,901 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:28,901 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:28,901 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:28,904 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:28,915 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:28,915 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:28,915 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 06:43:28,915 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:28,915 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 06:43:28,915 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 06:43:28,916 INFO L87 Difference]: Start difference. First operand 80130 states and 148083 transitions. cyclomatic complexity: 67958 Second operand 5 states. [2018-12-09 06:43:32,124 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:32,124 INFO L93 Difference]: Finished difference Result 237438 states and 441997 transitions. [2018-12-09 06:43:32,125 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2018-12-09 06:43:32,125 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 237438 states and 441997 transitions. [2018-12-09 06:43:32,794 INFO L131 ngComponentsAnalysis]: Automaton has 14 accepting balls. 76539 [2018-12-09 06:43:33,304 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 237438 states to 237438 states and 441997 transitions. [2018-12-09 06:43:33,304 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 237438 [2018-12-09 06:43:33,448 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 237438 [2018-12-09 06:43:33,448 INFO L73 IsDeterministic]: Start isDeterministic. Operand 237438 states and 441997 transitions. [2018-12-09 06:43:33,553 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:33,554 INFO L705 BuchiCegarLoop]: Abstraction has 237438 states and 441997 transitions. [2018-12-09 06:43:33,666 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 237438 states and 441997 transitions. [2018-12-09 06:43:34,687 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 237438 to 81712. [2018-12-09 06:43:34,688 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 81712 states. [2018-12-09 06:43:34,774 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81712 states to 81712 states and 149987 transitions. [2018-12-09 06:43:34,774 INFO L728 BuchiCegarLoop]: Abstraction has 81712 states and 149987 transitions. [2018-12-09 06:43:34,774 INFO L608 BuchiCegarLoop]: Abstraction has 81712 states and 149987 transitions. [2018-12-09 06:43:34,774 INFO L442 BuchiCegarLoop]: ======== Iteration 12============ [2018-12-09 06:43:34,774 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81712 states and 149987 transitions. [2018-12-09 06:43:34,923 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 23709 [2018-12-09 06:43:34,923 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:34,923 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:34,929 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:34,929 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:34,929 INFO L794 eck$LassoCheckResult]: Stem: 1220602#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 1220603#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1218506#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1218507#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1219102#L385 assume 0 != main_~tmp~8; 1225808#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1222059#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1221908#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1219930#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1221730#L2485 assume 0 == initPersonOnFloor_~floor; 1225379#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1217115#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1221255#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1223306#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1224934#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1224935#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1226419#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1217737#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1217738#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1222986#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1217670#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1217671#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1219646#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1219648#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1224936#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1223843#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1223844#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1223354#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1223355#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1226832#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1226833#L1675 assume !(0 != timeShift_~tmp___9~2); 1225903#L1766 assume !(1 == ~doorState~0); 1225904#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1225408#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1218603#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1218604#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1223635#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1222885#L1217-2 assume !(0 == ~currentFloorID~0); 1222886#L1223-2 assume ~currentFloorID~0 > 0; 1223746#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1223747#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1229026#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1223376#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1216877#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1229915#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1229914#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1219012#L1463 assume !(1 == ~currentHeading~0); 1217161#L1473 assume !(0 == ~currentFloorID~0); 1217162#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1216864#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1228922#L2963 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1227953#L896-1 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1227951#L2967 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1226797#L2975 assume !(1 == ~expectedDirection~0); 1226795#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1226794#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1226793#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1226792#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1226791#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1217746#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1222953#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1217678#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1217679#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1233710#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1233687#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1233686#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1233680#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1233681#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1276866#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1274168#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1225880#L1766-3 assume !(1 == ~doorState~0); 1225881#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1225416#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1225044#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1223646#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1223647#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1223722#L1217-8 assume !(0 == ~currentFloorID~0); 1227977#L1223-8 assume ~currentFloorID~0 > 0; 1223740#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1222440#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1219878#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1226381#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1216819#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1230486#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1230487#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1218982#L1463-3 assume !(1 == ~currentHeading~0); 1216867#L1473-9 assume !(0 == ~currentFloorID~0); 1216868#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1216839#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1233494#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1232203#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1233485#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1232199#L2975-1 assume !(1 == ~expectedDirection~0); 1232197#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1232196#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1232181#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1232177#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1230038#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1272940#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1272937#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1272935#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1272934#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1272933#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1272919#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1272917#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1272914#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1272909#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1272908#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1272907#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1259239#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1259238#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1259236#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1259157#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1223656#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1223657#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1230457#L1217-14 assume !(0 == ~currentFloorID~0); 1230458#L1223-14 assume ~currentFloorID~0 > 0; 1223727#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1223728#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1224470#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1224471#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1259159#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1260317#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1260311#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1218991#L1463-6 assume !(1 == ~currentHeading~0); 1218992#L1473-18 assume !(0 == ~currentFloorID~0); 1216823#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1216802#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1272630#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1270869#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1271214#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1270862#L2975-2 assume !(1 == ~expectedDirection~0); 1270860#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1270859#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1270853#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1270852#L2485-1 assume 0 == initPersonOnFloor_~floor; 1270834#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1270817#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1270809#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1270805#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1270804#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1270803#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1270802#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1252266#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1270799#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1270796#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1270794#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1270792#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1270791#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1270781#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1270776#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1270774#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1270768#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1270766#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1270765#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1251987#L1766-9 assume !(1 == ~doorState~0); 1230882#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1230877#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1230868#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1230438#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1230439#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1230435#L1217-20 assume !(0 == ~currentFloorID~0); 1223533#L1223-20 assume ~currentFloorID~0 > 0; 1223534#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1223667#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1251850#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1226359#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1216914#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1252367#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1252368#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1218964#L1463-9 assume !(1 == ~currentHeading~0); 1216811#L1473-27 assume !(0 == ~currentFloorID~0); 1216767#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1216725#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1276911#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1270029#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1271787#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1270021#L2975-3 assume !(1 == ~expectedDirection~0); 1269345#L2976-3 cleanup_~i~0 := 0; 1269343#L188-2 [2018-12-09 06:43:34,940 INFO L796 eck$LassoCheckResult]: Loop: 1269343#L188-2 assume !false; 1269342#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1269341#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 1269340#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1269339#L196 assume 1 != cleanup_~tmp___0~0; 1269338#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1269335#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1269328#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 1269144#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 1269129#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 1269127#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1269105#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1269102#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1269099#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1269097#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1260309#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1269079#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1269075#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1269073#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1269074#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1272521#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1272503#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1272501#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1272498#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1272493#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1272492#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1272491#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1261281#L1766-12 assume !(1 == ~doorState~0); 1226059#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1225405#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1225025#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1223623#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1223624#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1251453#L1217-26 assume !(0 == ~currentFloorID~0); 1251476#L1223-26 assume ~currentFloorID~0 > 0; 1251475#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1220446#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1220162#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1223957#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1251413#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1251323#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1251324#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1266810#L1463-12 assume !(1 == ~currentHeading~0); 1216726#L1473-36 assume !(0 == ~currentFloorID~0); 1216727#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1216697#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1269426#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1269356#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1269423#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1269352#L2975-4 assume !(1 == ~expectedDirection~0); 1269346#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1269343#L188-2 [2018-12-09 06:43:34,949 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:34,949 INFO L82 PathProgramCache]: Analyzing trace with hash 902278499, now seen corresponding path program 1 times [2018-12-09 06:43:34,949 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:34,950 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:34,950 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:34,950 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:34,950 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:34,957 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:34,980 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:34,980 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:34,980 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:34,980 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:34,980 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:34,980 INFO L82 PathProgramCache]: Analyzing trace with hash -1318191518, now seen corresponding path program 1 times [2018-12-09 06:43:34,980 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:34,980 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:34,981 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:34,981 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:34,981 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:34,986 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:35,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:35,080 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:35,080 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2018-12-09 06:43:35,080 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:35,080 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2018-12-09 06:43:35,080 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2018-12-09 06:43:35,080 INFO L87 Difference]: Start difference. First operand 81712 states and 149987 transitions. cyclomatic complexity: 68280 Second operand 6 states. [2018-12-09 06:43:38,070 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:38,070 INFO L93 Difference]: Finished difference Result 350225 states and 651921 transitions. [2018-12-09 06:43:38,070 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 8 states. [2018-12-09 06:43:38,071 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 350225 states and 651921 transitions. [2018-12-09 06:43:39,523 INFO L131 ngComponentsAnalysis]: Automaton has 21 accepting balls. 102550 [2018-12-09 06:43:40,142 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 350225 states to 350225 states and 651921 transitions. [2018-12-09 06:43:40,143 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 350225 [2018-12-09 06:43:40,310 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 350225 [2018-12-09 06:43:40,311 INFO L73 IsDeterministic]: Start isDeterministic. Operand 350225 states and 651921 transitions. [2018-12-09 06:43:40,444 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:40,445 INFO L705 BuchiCegarLoop]: Abstraction has 350225 states and 651921 transitions. [2018-12-09 06:43:40,583 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 350225 states and 651921 transitions. [2018-12-09 06:43:41,759 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 350225 to 117981. [2018-12-09 06:43:41,760 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 117981 states. [2018-12-09 06:43:41,891 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 117981 states to 117981 states and 215066 transitions. [2018-12-09 06:43:41,891 INFO L728 BuchiCegarLoop]: Abstraction has 117981 states and 215066 transitions. [2018-12-09 06:43:41,891 INFO L608 BuchiCegarLoop]: Abstraction has 117981 states and 215066 transitions. [2018-12-09 06:43:41,891 INFO L442 BuchiCegarLoop]: ======== Iteration 13============ [2018-12-09 06:43:41,891 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 117981 states and 215066 transitions. [2018-12-09 06:43:42,114 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 33568 [2018-12-09 06:43:42,114 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:42,114 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:42,119 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:42,119 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:42,120 INFO L794 eck$LassoCheckResult]: Stem: 1652536#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 1652537#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1650451#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1650452#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1651037#L385 assume 0 != main_~tmp~8; 1657538#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1653905#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1653756#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1651868#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1653602#L2485 assume 0 == initPersonOnFloor_~floor; 1657132#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1649070#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1653146#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1655090#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1656687#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1656688#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1658131#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1649692#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1649693#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1654767#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1649634#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1649635#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1658872#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1658870#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1654750#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1654751#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1655574#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1655138#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1655139#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1653142#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1653143#L1675 assume !(0 != timeShift_~tmp___9~2); 1657627#L1766 assume !(1 == ~doorState~0); 1657607#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1657169#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1650545#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1650546#L1401 assume 0 != stopRequestedInDirection_~overload~0; 1655419#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1659338#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1659511#L1217 assume !(0 == ~currentFloorID~0); 1659544#L1223 assume ~currentFloorID~0 > 0; 1659538#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1659533#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1659526#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1659250#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1658730#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1658597#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1658591#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1658586#L1463 assume !(1 == ~currentHeading~0); 1658580#L1473 assume !(0 == ~currentFloorID~0); 1658575#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1658571#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1658567#L2963 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1658565#L896-1 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1658563#L2967 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1658558#L2975 assume !(1 == ~expectedDirection~0); 1658556#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1658555#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1658554#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1658553#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1658551#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1658552#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1721997#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1721989#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1721990#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1738676#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1737396#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1737797#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1728545#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1728536#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1728537#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1664676#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1657605#L1766-3 assume !(1 == ~doorState~0); 1657606#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1657176#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1656798#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1655431#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 1655432#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1674995#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1674994#L1217-6 assume !(0 == ~currentFloorID~0); 1674993#L1223-6 assume ~currentFloorID~0 > 0; 1674932#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1674823#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1674814#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1674662#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1674550#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1674547#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1674545#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1674542#L1463-3 assume !(1 == ~currentHeading~0); 1674540#L1473-9 assume !(0 == ~currentFloorID~0); 1674537#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1674535#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1674534#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1673571#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1733786#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1726993#L2975-1 assume !(1 == ~expectedDirection~0); 1726989#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1673497#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1673490#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1673482#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1663215#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1649708#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1724111#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1724108#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1724109#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1744070#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1656695#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1654651#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1654652#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1655017#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1657975#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1737906#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1657620#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1657621#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1657180#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1650555#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1650556#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 1655095#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1655096#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1738453#L1217-12 assume !(0 == ~currentFloorID~0); 1738452#L1223-12 assume ~currentFloorID~0 > 0; 1738451#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1738324#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1738321#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1658108#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1648795#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1655887#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1658226#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1739877#L1463-6 assume !(1 == ~currentHeading~0); 1743780#L1473-18 assume !(0 == ~currentFloorID~0); 1743778#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1692671#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1716223#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1716070#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1716222#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1716066#L2975-2 assume !(1 == ~expectedDirection~0); 1716064#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1716063#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1716057#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1716056#L2485-1 assume 0 == initPersonOnFloor_~floor; 1716038#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1716021#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1716018#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1716015#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1716014#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1714282#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1677797#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1676249#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1676250#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1655003#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1743589#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1743590#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1758262#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1656698#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1656699#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1749413#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1655299#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1758387#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1739356#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1657798#L1766-9 assume !(1 == ~doorState~0); 1657799#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1657161#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1650535#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1650536#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 1655398#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1690417#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1690466#L1217-18 assume !(0 == ~currentFloorID~0); 1690497#L1223-18 assume ~currentFloorID~0 > 0; 1690491#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1690479#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1690298#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1690162#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1690037#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1690033#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1690031#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1690028#L1463-9 assume !(1 == ~currentHeading~0); 1690026#L1473-27 assume !(0 == ~currentFloorID~0); 1690023#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1690021#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1690019#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1690020#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1716782#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1716774#L2975-3 assume !(1 == ~expectedDirection~0); 1716772#L2976-3 cleanup_~i~0 := 0; 1716771#L188-2 [2018-12-09 06:43:42,130 INFO L796 eck$LassoCheckResult]: Loop: 1716771#L188-2 assume !false; 1716770#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1716769#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 1716768#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1716767#L196 assume 1 != cleanup_~tmp___0~0; 1716766#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1716763#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1716748#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 1716744#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 1716730#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 1716729#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1716728#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1716727#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1716726#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1716724#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1698040#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1682450#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1682447#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1682444#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1682442#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1682437#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1682436#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1670787#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1682401#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1682396#L865-58 assume !(1 == buttonForFloorIsPressed_~floorID); 1682394#L869-58 assume !(2 == buttonForFloorIsPressed_~floorID); 1682388#L873-58 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1682384#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1682380#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1682370#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1682355#L1766-12 assume !(1 == ~doorState~0); 1682051#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1682043#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1682039#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1682037#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 1682033#L1402-8 assume !(0 != stopRequestedInDirection_~buttonPressed~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1682034#L1048-25 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1682368#L1217-25 assume !(0 == ~currentFloorID~0); 1683374#L1223-25 assume !(~currentFloorID~0 > 0); 1683372#L1238-25 assume ~currentFloorID~0 > 0; 1683373#L1240-25 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 1688705#L1241-25 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1688618#L1370-25 stopRequestedInDirection_#t~ret41 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret41;havoc stopRequestedInDirection_#t~ret41;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1688614#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1688611#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1688608#L1463-12 assume !(1 == ~currentHeading~0); 1681460#L1473-36 assume !(0 == ~currentFloorID~0); 1681441#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1681427#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1716785#L2963-4 assume !(-1 == ~expectedDirection~0); 1716780#L2975-4 assume !(1 == ~expectedDirection~0); 1716773#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1716771#L188-2 [2018-12-09 06:43:42,140 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:42,140 INFO L82 PathProgramCache]: Analyzing trace with hash -1766342722, now seen corresponding path program 1 times [2018-12-09 06:43:42,140 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:42,140 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:42,141 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:42,141 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:42,141 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:42,149 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:42,191 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:42,191 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:42,191 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:42,192 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:42,192 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:42,192 INFO L82 PathProgramCache]: Analyzing trace with hash 162838458, now seen corresponding path program 1 times [2018-12-09 06:43:42,192 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:42,192 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:42,193 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:42,193 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:42,193 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:42,196 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:42,236 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:42,236 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:42,236 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2018-12-09 06:43:42,236 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:42,236 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2018-12-09 06:43:42,236 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2018-12-09 06:43:42,237 INFO L87 Difference]: Start difference. First operand 117981 states and 215066 transitions. cyclomatic complexity: 97090 Second operand 8 states. [2018-12-09 06:43:50,363 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:50,363 INFO L93 Difference]: Finished difference Result 258198 states and 470730 transitions. [2018-12-09 06:43:50,364 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2018-12-09 06:43:50,364 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 258198 states and 470730 transitions. [2018-12-09 06:43:51,488 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 74655 [2018-12-09 06:43:51,944 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 258198 states to 258198 states and 470730 transitions. [2018-12-09 06:43:51,944 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 258198 [2018-12-09 06:43:52,054 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 258198 [2018-12-09 06:43:52,054 INFO L73 IsDeterministic]: Start isDeterministic. Operand 258198 states and 470730 transitions. [2018-12-09 06:43:52,149 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:43:52,149 INFO L705 BuchiCegarLoop]: Abstraction has 258198 states and 470730 transitions. [2018-12-09 06:43:52,245 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 258198 states and 470730 transitions. [2018-12-09 06:43:55,885 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 258198 to 136432. [2018-12-09 06:43:55,885 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 136432 states. [2018-12-09 06:43:56,035 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136432 states to 136432 states and 249187 transitions. [2018-12-09 06:43:56,035 INFO L728 BuchiCegarLoop]: Abstraction has 136432 states and 249187 transitions. [2018-12-09 06:43:56,035 INFO L608 BuchiCegarLoop]: Abstraction has 136432 states and 249187 transitions. [2018-12-09 06:43:56,035 INFO L442 BuchiCegarLoop]: ======== Iteration 14============ [2018-12-09 06:43:56,035 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 136432 states and 249187 transitions. [2018-12-09 06:43:56,286 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 38640 [2018-12-09 06:43:56,286 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:43:56,286 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:43:56,291 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:56,291 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:43:56,292 INFO L794 eck$LassoCheckResult]: Stem: 2028727#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 2028728#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2026641#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 2026642#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2027223#L385 assume 0 != main_~tmp~8; 2033518#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2030008#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2029861#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2028063#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2029713#L2485 assume 0 == initPersonOnFloor_~floor; 2033114#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2025265#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2029292#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2031151#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2032677#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2032678#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2034159#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2025879#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2025880#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2030840#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2025820#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2025821#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2027776#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2027778#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2036169#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2036166#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2036163#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 2036160#L873-10 assume !(3 == buttonForFloorIsPressed_~floorID); 2036158#L877-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~8 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2036156#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2036155#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2036153#L1675 assume !(0 != timeShift_~tmp___9~2); 2036152#L1766 assume !(1 == ~doorState~0); 2036151#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2036133#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2036129#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2036127#L1401 assume 0 != stopRequestedInDirection_~overload~0; 2036126#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2031547#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2030722#L1217 assume !(0 == ~currentFloorID~0); 2030723#L1223 assume ~currentFloorID~0 > 0; 2031422#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2030457#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2028516#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2031204#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2025048#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2031984#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2037333#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2027135#L1463 assume !(1 == ~currentHeading~0); 2025311#L1473 assume !(0 == ~currentFloorID~0); 2025312#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2025042#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2035878#L2963 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2035876#L896-1 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2035874#L2967 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2035862#L2975 assume !(1 == ~expectedDirection~0); 2035860#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2035859#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2035858#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2035857#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2035856#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2025888#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2033797#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2033798#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2080528#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2080526#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2068084#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2080525#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2080521#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2080522#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2085252#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2085251#L1675-1 assume !(0 != timeShift_~tmp___9~2); 2077960#L1766-3 assume !(1 == ~doorState~0); 2077959#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2077958#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2077953#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2077952#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 2077949#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2077946#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2077944#L1217-6 assume !(0 == ~currentFloorID~0); 2077942#L1223-6 assume ~currentFloorID~0 > 0; 2077939#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2077924#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2077900#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2077887#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2077862#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2077861#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2077860#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2077859#L1463-3 assume !(1 == ~currentHeading~0); 2077858#L1473-9 assume !(0 == ~currentFloorID~0); 2025050#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2025016#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2068066#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2063296#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2068065#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2056607#L2975-1 assume !(1 == ~expectedDirection~0); 2056343#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2056324#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2056285#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2056022#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2039769#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2082516#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2082515#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2082512#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2082514#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2085357#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2085343#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2085339#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2085332#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2085334#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2119968#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2119957#L1675-2 assume !(0 != timeShift_~tmp___9~2); 2064431#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2064429#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2064424#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2064418#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2064416#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 2064413#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2064410#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2064409#L1217-12 assume !(0 == ~currentFloorID~0); 2064408#L1223-12 assume ~currentFloorID~0 > 0; 2064405#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2064401#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2064378#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2064370#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2064337#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2064335#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2064331#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2064329#L1463-6 assume !(1 == ~currentHeading~0); 2064327#L1473-18 assume !(0 == ~currentFloorID~0); 2064324#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2064323#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2064322#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2063715#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2064321#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2063711#L2975-2 assume !(1 == ~expectedDirection~0); 2063709#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2063708#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2063697#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2063695#L2485-1 assume 0 == initPersonOnFloor_~floor; 2063662#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2063608#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2063603#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2063277#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2063273#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2063266#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2056605#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2056474#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2081203#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2081183#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2081172#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2081160#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2081161#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2081146#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2081140#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2081141#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2081125#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2080608#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2067825#L1675-3 assume !(0 != timeShift_~tmp___9~2); 2067824#L1766-9 assume !(1 == ~doorState~0); 2067823#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2067820#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2067817#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2067816#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 2067814#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2067811#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2067809#L1217-18 assume !(0 == ~currentFloorID~0); 2067807#L1223-18 assume ~currentFloorID~0 > 0; 2067801#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2067782#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2067764#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2067751#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2067546#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2067542#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2067539#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2067536#L1463-9 assume !(1 == ~currentHeading~0); 2067534#L1473-27 assume !(0 == ~currentFloorID~0); 2067532#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2067530#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2067528#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2066879#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2067525#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2065117#L2975-3 assume !(1 == ~expectedDirection~0); 2065115#L2976-3 cleanup_~i~0 := 0; 2065114#L188-2 [2018-12-09 06:43:56,300 INFO L796 eck$LassoCheckResult]: Loop: 2065114#L188-2 assume !false; 2065113#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2065112#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 2064828#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2064817#L196 assume 1 != cleanup_~tmp___0~0; 2064815#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2063700#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2063696#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 2063645#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 2063609#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 2063606#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2063607#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2056603#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2056604#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2056327#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2056021#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2056177#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2105107#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2105105#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2104724#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2104725#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2104694#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2104682#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2104683#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2104671#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2081127#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2080721#L1675-4 assume !(0 != timeShift_~tmp___9~2); 2080719#L1766-12 assume !(1 == ~doorState~0); 2080717#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2080710#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2080705#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2080703#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 2080700#L1402-8 assume !(0 != stopRequestedInDirection_~buttonPressed~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2080701#L1048-25 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2080878#L1217-25 assume !(0 == ~currentFloorID~0); 2080876#L1223-25 assume ~currentFloorID~0 > 0; 2080875#L1224-25 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2080872#L2214-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2080847#L2241-265 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2080835#L1228-25 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2080625#L1370-25 stopRequestedInDirection_#t~ret41 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret41;havoc stopRequestedInDirection_#t~ret41;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2080622#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2080619#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2080617#L1463-12 assume !(1 == ~currentHeading~0); 2080615#L1473-36 assume !(0 == ~currentFloorID~0); 2080613#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2080612#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2080611#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2066896#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2080610#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2065120#L2975-4 assume !(1 == ~expectedDirection~0); 2065116#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2065114#L188-2 [2018-12-09 06:43:56,308 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:56,309 INFO L82 PathProgramCache]: Analyzing trace with hash 477720436, now seen corresponding path program 1 times [2018-12-09 06:43:56,309 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:56,309 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:56,309 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:56,309 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:56,309 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:56,316 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:56,357 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:56,357 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:56,357 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:43:56,357 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:43:56,357 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:43:56,357 INFO L82 PathProgramCache]: Analyzing trace with hash 1297388381, now seen corresponding path program 1 times [2018-12-09 06:43:56,357 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:43:56,357 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:43:56,358 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:56,358 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:43:56,358 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:43:56,361 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:43:56,380 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:43:56,380 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:43:56,380 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2018-12-09 06:43:56,380 INFO L811 eck$LassoCheckResult]: loop already infeasible [2018-12-09 06:43:56,380 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2018-12-09 06:43:56,380 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2018-12-09 06:43:56,380 INFO L87 Difference]: Start difference. First operand 136432 states and 249187 transitions. cyclomatic complexity: 112760 Second operand 5 states. [2018-12-09 06:43:58,964 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:43:58,965 INFO L93 Difference]: Finished difference Result 542397 states and 1003208 transitions. [2018-12-09 06:43:58,965 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2018-12-09 06:43:58,965 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 542397 states and 1003208 transitions. [2018-12-09 06:44:00,909 INFO L131 ngComponentsAnalysis]: Automaton has 19 accepting balls. 171754 [2018-12-09 06:44:01,980 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 542397 states to 542397 states and 1003208 transitions. [2018-12-09 06:44:01,980 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 542397 [2018-12-09 06:44:02,247 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 542397 [2018-12-09 06:44:02,247 INFO L73 IsDeterministic]: Start isDeterministic. Operand 542397 states and 1003208 transitions. [2018-12-09 06:44:02,452 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:44:02,452 INFO L705 BuchiCegarLoop]: Abstraction has 542397 states and 1003208 transitions. [2018-12-09 06:44:02,673 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 542397 states and 1003208 transitions. [2018-12-09 06:44:07,790 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 542397 to 136840. [2018-12-09 06:44:07,790 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 136840 states. [2018-12-09 06:44:07,937 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 136840 states to 136840 states and 249663 transitions. [2018-12-09 06:44:07,937 INFO L728 BuchiCegarLoop]: Abstraction has 136840 states and 249663 transitions. [2018-12-09 06:44:07,937 INFO L608 BuchiCegarLoop]: Abstraction has 136840 states and 249663 transitions. [2018-12-09 06:44:07,937 INFO L442 BuchiCegarLoop]: ======== Iteration 15============ [2018-12-09 06:44:07,937 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 136840 states and 249663 transitions. [2018-12-09 06:44:08,191 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 38748 [2018-12-09 06:44:08,192 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2018-12-09 06:44:08,192 INFO L119 BuchiIsEmpty]: Starting construction of run [2018-12-09 06:44:08,197 INFO L866 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:44:08,198 INFO L867 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2018-12-09 06:44:08,198 INFO L794 eck$LassoCheckResult]: Stem: 2707633#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.alloc(10);call #t~string74.base, #t~string74.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.alloc(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.alloc(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.alloc(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.alloc(10);call #t~string84.base, #t~string84.offset := #Ultimate.alloc(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.alloc(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.alloc(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.alloc(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.alloc(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.alloc(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.alloc(30);call #t~string152.base, #t~string152.offset := #Ultimate.alloc(9);call #t~string153.base, #t~string153.offset := #Ultimate.alloc(21);call #t~string154.base, #t~string154.offset := #Ultimate.alloc(30);call #t~string155.base, #t~string155.offset := #Ultimate.alloc(9);call #t~string156.base, #t~string156.offset := #Ultimate.alloc(21);call #t~string160.base, #t~string160.offset := #Ultimate.alloc(30);call #t~string161.base, #t~string161.offset := #Ultimate.alloc(9);call #t~string162.base, #t~string162.offset := #Ultimate.alloc(25);call #t~string163.base, #t~string163.offset := #Ultimate.alloc(30);call #t~string164.base, #t~string164.offset := #Ultimate.alloc(9);call #t~string165.base, #t~string165.offset := #Ultimate.alloc(25); 2707634#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2705533#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 2705534#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2706110#L385 assume 0 != main_~tmp~8; 2712707#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2709020#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2708872#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2706947#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2708719#L2485 assume 0 == initPersonOnFloor_~floor; 2712281#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2704144#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2708264#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2710201#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2711834#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2711835#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2713346#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2704763#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2704764#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2709898#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2704705#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2704706#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2708598#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2711836#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2711837#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2710740#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2710741#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 2710239#L873-10 assume !(3 == buttonForFloorIsPressed_~floorID); 2710240#L877-10 assume !(4 == buttonForFloorIsPressed_~floorID);buttonForFloorIsPressed_~retValue_acc~8 := 0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2713010#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2713011#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2715566#L1675 assume !(0 != timeShift_~tmp___9~2); 2712798#L1766 assume !(1 == ~doorState~0); 2712780#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2712319#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2705624#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2705625#L1401 assume 0 != stopRequestedInDirection_~overload~0; 2710221#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2710222#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2709785#L1217 assume !(0 == ~currentFloorID~0); 2709786#L1223 assume ~currentFloorID~0 > 0; 2710465#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2709519#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2707401#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2710251#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2703901#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2711040#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2716780#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2706022#L1463 assume !(1 == ~currentHeading~0); 2704191#L1473 assume !(0 == ~currentFloorID~0); 2704192#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2703895#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2715007#L2963 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2714994#L896-1 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2715002#L2967 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2714958#L2975 assume !(1 == ~expectedDirection~0); 2714496#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2714494#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2714489#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2714486#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2714483#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2704772#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2709867#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2704713#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2704714#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2760396#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2745927#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2760380#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2760378#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2760376#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2759202#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2759203#L1675-1 assume !(0 != timeShift_~tmp___9~2); 2755415#L1766-3 assume !(1 == ~doorState~0); 2755300#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2755299#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2755295#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2710530#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 2710531#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2719461#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2719462#L1217-6 assume !(0 == ~currentFloorID~0); 2710452#L1223-6 assume ~currentFloorID~0 > 0; 2710453#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2710615#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2755376#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2713305#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2703885#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2753776#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2755262#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2705989#L1463-3 assume !(1 == ~currentHeading~0); 2703898#L1473-9 assume !(0 == ~currentFloorID~0); 2703899#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2703870#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2755418#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2755073#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2755074#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2755044#L2975-1 assume !(1 == ~expectedDirection~0); 2755042#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2755021#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2755015#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2755014#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2719441#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2798397#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2798396#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2798394#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2798395#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2802976#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2711844#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2709775#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2709776#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2802954#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2802953#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2802951#L1675-2 assume !(0 != timeShift_~tmp___9~2); 2791863#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2791931#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2791930#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2791926#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2710543#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 2710544#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2791922#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2794136#L1217-12 assume !(0 == ~currentFloorID~0); 2794140#L1223-12 assume ~currentFloorID~0 > 0; 2794138#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2794139#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2794162#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2713299#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2703957#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2791696#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2791697#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2818967#L1463-6 assume !(1 == ~currentHeading~0); 2818966#L1473-18 assume !(0 == ~currentFloorID~0); 2703853#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2703832#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2816444#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2815155#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2816443#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2815151#L2975-2 assume !(1 == ~expectedDirection~0); 2815149#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2815148#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2815142#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2815141#L2485-1 assume 0 == initPersonOnFloor_~floor; 2815122#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2815105#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2815102#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2815099#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2815098#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2815097#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2801137#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2728344#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2728345#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2802132#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2799597#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2799598#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2822825#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2822816#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2822811#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2822809#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2822803#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2822801#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2822800#L1675-3 assume !(0 != timeShift_~tmp___9~2); 2777532#L1766-9 assume !(1 == ~doorState~0); 2777394#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2777393#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2777389#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2777524#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 2777523#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2777381#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2777521#L1217-18 assume !(0 == ~currentFloorID~0); 2777525#L1223-18 assume ~currentFloorID~0 > 0; 2777513#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2777482#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2777480#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2777421#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2777278#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2777026#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2777023#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2777020#L1463-9 assume !(1 == ~currentHeading~0); 2777018#L1473-27 assume !(0 == ~currentFloorID~0); 2777015#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2777013#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2777012#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2764268#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2777004#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2764254#L2975-3 assume !(1 == ~expectedDirection~0); 2759217#L2976-3 cleanup_~i~0 := 0; 2755427#L188-2 [2018-12-09 06:44:08,211 INFO L796 eck$LassoCheckResult]: Loop: 2755427#L188-2 assume !false; 2753770#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2749845#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 2749840#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2749835#L196 assume 1 != cleanup_~tmp___0~0; 2749811#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2746796#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2746794#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 2746759#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 2746731#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 2745873#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2745869#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2745864#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2745860#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2745856#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2726733#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2726734#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2768054#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2768050#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2768051#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2823794#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2823779#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2823777#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2823774#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2823769#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2823768#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2823766#L1675-4 assume !(0 != timeShift_~tmp___9~2); 2766441#L1766-12 assume !(1 == ~doorState~0); 2766440#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2766439#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2766435#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2767187#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 2767186#L1402-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2767045#L1048-24 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2767181#L1217-24 assume !(0 == ~currentFloorID~0); 2767213#L1223-24 assume ~currentFloorID~0 > 0; 2767210#L1224-24 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 2767211#L1238-24 assume ~currentFloorID~0 > 0; 2767236#L1240-24 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 2767116#L1241-24 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2767104#L1370-24 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2766960#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2766961#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2776759#L1463-12 assume !(1 == ~currentHeading~0); 2776757#L1473-36 assume !(0 == ~currentFloorID~0); 2776754#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2776753#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2776752#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2764078#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2776745#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2764071#L2975-4 assume !(1 == ~expectedDirection~0); 2759218#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2755427#L188-2 [2018-12-09 06:44:08,220 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:44:08,221 INFO L82 PathProgramCache]: Analyzing trace with hash 477720436, now seen corresponding path program 2 times [2018-12-09 06:44:08,221 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:44:08,221 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:44:08,221 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:44:08,221 INFO L103 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2018-12-09 06:44:08,221 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:44:08,228 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:44:08,253 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:44:08,253 INFO L312 seRefinementStrategy]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2018-12-09 06:44:08,253 INFO L327 seRefinementStrategy]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2018-12-09 06:44:08,253 INFO L799 eck$LassoCheckResult]: stem already infeasible [2018-12-09 06:44:08,253 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:44:08,253 INFO L82 PathProgramCache]: Analyzing trace with hash 354402529, now seen corresponding path program 1 times [2018-12-09 06:44:08,253 INFO L223 ckRefinementStrategy]: Switched to mode SMTINTERPOL_TREE_INTERPOLANTS [2018-12-09 06:44:08,253 INFO L69 tionRefinementEngine]: Using refinement strategy CamelRefinementStrategy [2018-12-09 06:44:08,254 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:44:08,254 INFO L101 rtionOrderModulation]: Changing assertion order to NOT_INCREMENTALLY [2018-12-09 06:44:08,254 INFO L119 rtionOrderModulation]: Craig_TreeInterpolation forces the order to NOT_INCREMENTALLY [2018-12-09 06:44:08,262 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-09 06:44:08,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2018-12-09 06:44:08,831 WARN L180 SmtUtils]: Spent 523.00 ms on a formula simplification. DAG size of input: 232 DAG size of output: 203 [2018-12-09 06:44:10,676 WARN L180 SmtUtils]: Spent 1.79 s on a formula simplification. DAG size of input: 222 DAG size of output: 178 [2018-12-09 06:44:10,684 INFO L216 LassoAnalysis]: Preferences: [2018-12-09 06:44:10,684 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-09 06:44:10,685 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-09 06:44:10,685 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-09 06:44:10,685 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2018-12-09 06:44:10,685 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:10,685 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-09 06:44:10,685 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-09 06:44:10,685 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product21_true-unreach-call_true-termination.cil.c_Iteration15_Loop [2018-12-09 06:44:10,685 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-09 06:44:10,685 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-09 06:44:10,720 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,724 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,735 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,736 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,748 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,755 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,756 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,758 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,762 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,763 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,764 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,765 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,766 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,770 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,772 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,773 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,778 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,781 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,785 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,787 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,788 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,790 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,791 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,793 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,853 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,855 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,858 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,864 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,869 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,870 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,871 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,890 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,893 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,894 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,895 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,896 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,897 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,898 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,908 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,912 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,913 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,914 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,915 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,916 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,919 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,920 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,921 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,923 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,924 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,925 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,926 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,942 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,942 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,950 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,952 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,953 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:10,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:11,491 WARN L180 SmtUtils]: Spent 157.00 ms on a formula simplification. DAG size of input: 54 DAG size of output: 47 [2018-12-09 06:44:11,659 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-09 06:44:11,659 INFO L412 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,663 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,663 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,668 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,668 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret31=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret31=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,684 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,684 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,686 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,686 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,702 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,703 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,705 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,705 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,724 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,724 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,727 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,727 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls=0, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectFloorCalls=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls=0, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectFloorCalls=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,743 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,744 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,745 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,746 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret63=0} Honda state: {ULTIMATE.start_timeShift_#t~ret63=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,767 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,767 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,769 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,769 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret29=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret29=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,787 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,787 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,790 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,790 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=4} Honda state: {~doorState~0=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,807 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,808 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,810 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,810 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,826 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,826 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,828 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,828 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___8~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,845 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,845 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,849 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,849 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11=1, ULTIMATE.start_isIdle_~tmp~14=1} Honda state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11=1, ULTIMATE.start_isIdle_~tmp~14=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,870 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,870 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,874 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,874 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~0=0, ULTIMATE.start_isBlocked_~retValue_acc~5=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~0=0, ULTIMATE.start_isBlocked_~retValue_acc~5=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,889 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,889 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,891 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,891 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~17=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~17=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:11,907 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:11,907 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:11,909 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:11,909 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,018 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,018 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,023 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,023 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret22=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,038 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,038 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,043 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,043 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret26=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret26=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,060 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,060 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,062 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,062 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,078 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,078 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,080 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,081 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,096 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,096 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,098 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,098 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret32=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret32=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,114 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,114 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,115 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,116 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret43=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret43=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,132 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,132 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,134 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,134 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___3~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,150 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,150 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,152 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,152 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret131=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret131=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,168 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,168 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,170 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,170 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret42=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,185 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,185 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,187 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,188 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret62=0} Honda state: {ULTIMATE.start_timeShift_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,207 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,208 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,211 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,211 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~floorButtons_0~0=7, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=7} Honda state: {~floorButtons_0~0=7, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=7} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,226 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,226 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,229 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,229 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___9~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,254 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,254 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,256 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,256 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,271 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,271 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,273 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,273 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret46=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret46=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,288 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,288 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,290 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,290 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret37=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret37=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,306 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,306 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,308 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,308 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,323 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,323 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,326 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,326 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,344 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,344 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,346 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,346 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~4=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,362 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,362 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,364 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,364 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret124=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret124=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,378 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,379 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,380 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,381 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,396 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,396 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,398 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,398 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~6=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,417 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,417 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,420 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,420 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,435 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,436 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,438 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,438 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret33=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret33=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,462 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,462 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,465 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,465 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,480 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,480 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,482 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,483 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret65=0} Honda state: {ULTIMATE.start_timeShift_#t~ret65=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,498 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,498 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,503 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,503 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,523 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,524 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,526 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,527 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret128=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret128=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,548 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,548 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,550 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,550 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret39=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret39=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,567 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,567 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,573 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,573 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=4, ~calls_0~0=4, ULTIMATE.start_anyStopRequested_~tmp___3~0=4, ULTIMATE.start_isFloorCalling_~retValue_acc~20=4} Honda state: {ULTIMATE.start_isFloorCalling_#res=4, ~calls_0~0=4, ULTIMATE.start_anyStopRequested_~tmp___3~0=4, ULTIMATE.start_isFloorCalling_~retValue_acc~20=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,598 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,598 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,602 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,602 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=4, ULTIMATE.start_buttonForFloorIsPressed_#res=4, ~floorButtons_1~0=4, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~8=4} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=4, ULTIMATE.start_buttonForFloorIsPressed_#res=4, ~floorButtons_1~0=4, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~8=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,620 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,620 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,635 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,635 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp5~0=0, ~maximumWeight~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp4~1=0, ~weight~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp9~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp5~0=0, ~maximumWeight~0=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp4~1=0, ~weight~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp9~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,650 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,650 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,652 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,652 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret23=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,667 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,667 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,669 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,669 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~13=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,684 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,684 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,686 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,686 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret70=0} Honda state: {ULTIMATE.start_timeShift_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,701 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,701 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,703 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,703 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,719 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,719 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,722 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,722 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret34=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret34=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,737 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,737 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,739 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,739 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret64=0} Honda state: {ULTIMATE.start_timeShift_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,753 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,753 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,755 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,755 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp~15=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp~15=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,770 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,771 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,773 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,773 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~9=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,788 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,788 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,790 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,790 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,806 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,806 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,807 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,807 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,822 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,822 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,824 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,824 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~floorID=0} Honda state: {ULTIMATE.start_isFloorCalling_~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,839 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,839 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,841 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,841 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret122=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret122=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,857 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,858 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,859 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,859 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,874 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,875 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,877 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,877 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~overload~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~overload~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,892 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,892 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,894 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,894 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret38=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret38=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,909 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,909 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,911 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,911 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:12,926 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:12,926 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:12,928 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:12,928 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~24=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:13,039 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:13,039 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:13,042 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:13,042 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret35=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret35=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:13,057 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:13,057 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:13,061 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:13,061 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:13,076 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:13,076 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:13,078 INFO L445 LassoAnalysis]: Proved nontermination for one component. [2018-12-09 06:44:13,078 INFO L448 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___4~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___4~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:13,094 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2018-12-09 06:44:13,094 INFO L163 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/working_dir_3f006cab-97ee-4ce6-bffc-335b97dfbd5b/bin-2019/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:13,121 INFO L151 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2018-12-09 06:44:13,121 INFO L163 nArgumentSynthesizer]: Using integer mode. [2018-12-09 06:44:13,576 INFO L452 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2018-12-09 06:44:13,577 INFO L216 LassoAnalysis]: Preferences: [2018-12-09 06:44:13,578 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2018-12-09 06:44:13,578 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2018-12-09 06:44:13,578 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2018-12-09 06:44:13,578 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2018-12-09 06:44:13,578 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2018-12-09 06:44:13,578 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2018-12-09 06:44:13,578 INFO L130 ssoRankerPreferences]: Path of dumped script: [2018-12-09 06:44:13,578 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product21_true-unreach-call_true-termination.cil.c_Iteration15_Loop [2018-12-09 06:44:13,578 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2018-12-09 06:44:13,578 INFO L282 LassoAnalysis]: Starting lasso preprocessing... [2018-12-09 06:44:13,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,594 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,595 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,596 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,598 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,599 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,601 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,606 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,609 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,611 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,612 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,613 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,619 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,626 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,632 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,634 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,637 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,638 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,639 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,640 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,641 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,642 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,643 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,703 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,711 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,738 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,743 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,746 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,747 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,749 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,750 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,752 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,753 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,759 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,760 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,761 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,777 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,779 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,800 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,803 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,807 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,809 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,815 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,826 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,831 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,846 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,847 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,848 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,849 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,850 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,852 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,859 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,860 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,862 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,863 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,865 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,866 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,867 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,873 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,875 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,876 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,880 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,881 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,882 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,883 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,885 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:13,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2018-12-09 06:44:14,360 WARN L180 SmtUtils]: Spent 174.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 48 [2018-12-09 06:44:14,577 INFO L300 LassoAnalysis]: Preprocessing complete. [2018-12-09 06:44:14,580 INFO L497 LassoAnalysis]: Using template 'affine'. [2018-12-09 06:44:14,581 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,582 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,582 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,582 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,583 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,583 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,584 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,584 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,585 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,585 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,586 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,586 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,586 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,586 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,586 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,586 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,586 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,586 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,586 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,587 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,587 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,587 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,587 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,587 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,587 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,587 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,587 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,587 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,588 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,588 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,588 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,588 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,588 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,588 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,588 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,588 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,589 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,589 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,589 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,589 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,589 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,589 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,589 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,589 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,589 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,590 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,590 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,590 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,590 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,590 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-12-09 06:44:14,590 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,590 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-12-09 06:44:14,590 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,591 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,591 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,591 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,591 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,591 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,591 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,591 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,592 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,592 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,592 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,592 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,592 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,592 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,593 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,593 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,593 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,593 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,593 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,594 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,594 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,594 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,594 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,594 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,595 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,595 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,595 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,595 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,595 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,595 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,595 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,595 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,596 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,596 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,596 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,596 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,596 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,596 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,596 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,597 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,597 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,597 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,597 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,597 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,597 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,597 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,598 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,598 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,598 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,598 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,598 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,598 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,598 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,598 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,598 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,599 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,599 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,599 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,599 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,599 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,599 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,599 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,600 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,600 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,600 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,600 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,600 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,600 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,600 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,600 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,600 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,601 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,601 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,601 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,601 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,601 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,601 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,601 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,602 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,602 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,602 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,602 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,602 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,602 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,602 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,602 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,603 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,603 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,603 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,603 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,603 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,603 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,603 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,604 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,604 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,604 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,604 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,604 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,604 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,604 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,604 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,604 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,605 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,605 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,605 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,605 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,605 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,605 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,605 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,605 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,605 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,606 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,606 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,606 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,606 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-12-09 06:44:14,606 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,606 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-12-09 06:44:14,606 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,607 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,608 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,608 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,608 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,608 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,608 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,608 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,608 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,608 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,609 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,609 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,609 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,609 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,609 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,609 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,609 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,609 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,609 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,610 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,610 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,610 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,610 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,610 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,610 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,610 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,610 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,611 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,611 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,611 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,611 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,611 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,611 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,611 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,612 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,612 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,612 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,612 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,612 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,612 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,612 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,613 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,613 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,613 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,613 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,613 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,613 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,613 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,614 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,614 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,614 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,614 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,614 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,614 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,614 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,614 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,615 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,615 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,615 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,615 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,615 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,615 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,615 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,615 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,615 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,616 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,616 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,616 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,616 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,616 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,616 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,616 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,616 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,616 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,617 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,617 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,617 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,617 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,617 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,617 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,617 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,617 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,618 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,618 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,618 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,618 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,618 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,618 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,618 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,618 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,618 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,619 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,619 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,619 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,619 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,619 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,619 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,619 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,620 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,620 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,620 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,620 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,620 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,620 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,621 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,621 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,621 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,621 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,621 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,621 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,621 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,621 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,621 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,622 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,622 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,622 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,622 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,622 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,622 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,622 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,622 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,623 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,623 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,623 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,623 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,623 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,623 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,623 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,623 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,624 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,624 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,624 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,624 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,624 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,624 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,624 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,624 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,625 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,625 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,625 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,625 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,625 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,625 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,625 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,625 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,625 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,626 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,626 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,626 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,626 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,626 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,626 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,626 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,626 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,627 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,627 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,627 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,627 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,627 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,627 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,627 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,627 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,627 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,628 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,628 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,628 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,628 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,628 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,628 INFO L206 nArgumentSynthesizer]: 3 loop disjuncts [2018-12-09 06:44:14,628 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,629 INFO L402 nArgumentSynthesizer]: We have 6 Motzkin's Theorem applications. [2018-12-09 06:44:14,629 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,631 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,632 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,632 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,632 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,632 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,632 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,632 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,632 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,632 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,633 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,633 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,633 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,633 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,633 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,633 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,633 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,634 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,634 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,634 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,634 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,634 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,634 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,635 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,635 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,635 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,635 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,635 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,635 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,635 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,635 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,636 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,636 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,636 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,636 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,636 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,636 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,636 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,636 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,637 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,637 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,637 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,637 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,637 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,637 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,637 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,637 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,637 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,638 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,638 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,638 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,638 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,638 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,638 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,638 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,638 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,639 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,639 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,639 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,639 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,639 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,639 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,639 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,639 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,639 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,640 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,640 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,640 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,640 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,640 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,640 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,640 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,640 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,641 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,641 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,641 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,641 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,641 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,641 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,641 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,641 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,641 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,642 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,642 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,642 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,642 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,642 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,642 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,642 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,642 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,642 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,643 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,643 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,643 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,643 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,643 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,643 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-12-09 06:44:14,643 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,644 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-12-09 06:44:14,644 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,645 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,645 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,645 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,646 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,646 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,646 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,646 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,646 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,646 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,646 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,646 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,647 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,647 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,647 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,647 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,647 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,647 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,647 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,648 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,648 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,648 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,648 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,648 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,648 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,648 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,648 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,648 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,649 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,649 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,649 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,649 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,649 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,649 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,649 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,649 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,649 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,650 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,650 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,650 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,650 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,710 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,710 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,710 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,710 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,711 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,711 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,711 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,712 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,712 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,712 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,712 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,712 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,712 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,712 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,713 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,713 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,713 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,713 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,713 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,713 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,713 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,714 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,714 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,714 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,714 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,714 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,715 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,715 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,715 INFO L206 nArgumentSynthesizer]: 2 loop disjuncts [2018-12-09 06:44:14,715 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,715 INFO L402 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2018-12-09 06:44:14,715 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,813 INFO L530 LassoAnalysis]: Proving termination failed for this template and these settings. [2018-12-09 06:44:14,813 INFO L122 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2018-12-09 06:44:14,813 INFO L339 nArgumentSynthesizer]: Template has degree 0. [2018-12-09 06:44:14,813 INFO L352 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2018-12-09 06:44:14,813 INFO L205 nArgumentSynthesizer]: 1 stem disjuncts [2018-12-09 06:44:14,814 INFO L206 nArgumentSynthesizer]: 1 loop disjuncts [2018-12-09 06:44:14,814 INFO L207 nArgumentSynthesizer]: 2 template conjuncts. [2018-12-09 06:44:14,814 INFO L402 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2018-12-09 06:44:14,814 INFO L403 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2018-12-09 06:44:14,815 INFO L421 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2018-12-09 06:44:14,817 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2018-12-09 06:44:14,817 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2018-12-09 06:44:14,819 INFO L437 nArgumentSynthesizer]: Simplifying supporting invariants... [2018-12-09 06:44:14,819 INFO L440 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2018-12-09 06:44:14,819 INFO L518 LassoAnalysis]: Proved termination. [2018-12-09 06:44:14,820 INFO L520 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2018-12-09 06:44:14,821 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2018-12-09 06:44:14,836 INFO L141 PredicateUnifier]: Initialized classic predicate unifier [2018-12-09 06:44:14,972 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:44:14,980 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-09 06:44:15,016 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2018-12-09 06:44:15,018 INFO L273 TraceCheckSpWp]: Computing forward predicates... [2018-12-09 06:44:15,043 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2018-12-09 06:44:15,047 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2018-12-09 06:44:15,048 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 136840 states and 249663 transitions. cyclomatic complexity: 112828 Second operand 5 states. [2018-12-09 06:44:16,414 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 136840 states and 249663 transitions. cyclomatic complexity: 112828. Second operand 5 states. Result 175587 states and 320180 transitions. Complement of second has 8 states. [2018-12-09 06:44:16,415 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2018-12-09 06:44:16,415 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2018-12-09 06:44:16,427 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 15471 transitions. [2018-12-09 06:44:16,429 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 15471 transitions. Stem has 184 letters. Loop has 52 letters. [2018-12-09 06:44:16,431 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 06:44:16,431 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 15471 transitions. Stem has 236 letters. Loop has 52 letters. [2018-12-09 06:44:16,432 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 06:44:16,433 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 15471 transitions. Stem has 184 letters. Loop has 104 letters. [2018-12-09 06:44:16,433 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2018-12-09 06:44:16,434 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 175587 states and 320180 transitions. [2018-12-09 06:44:16,980 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 06:44:16,980 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 175587 states to 0 states and 0 transitions. [2018-12-09 06:44:16,980 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-09 06:44:16,980 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-09 06:44:16,980 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-09 06:44:16,980 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:44:16,980 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 06:44:16,980 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 06:44:16,980 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2018-12-09 06:44:16,981 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2018-12-09 06:44:16,981 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2018-12-09 06:44:16,981 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2018-12-09 06:44:16,981 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2018-12-09 06:44:16,981 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 06:44:16,981 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2018-12-09 06:44:16,981 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2018-12-09 06:44:16,981 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2018-12-09 06:44:16,981 INFO L705 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L728 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L608 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2018-12-09 06:44:16,981 INFO L442 BuchiCegarLoop]: ======== Iteration 16============ [2018-12-09 06:44:16,981 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2018-12-09 06:44:16,982 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2018-12-09 06:44:16,982 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2018-12-09 06:44:16,986 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 09.12 06:44:16 BoogieIcfgContainer [2018-12-09 06:44:16,986 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2018-12-09 06:44:16,986 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2018-12-09 06:44:16,986 INFO L271 PluginConnector]: Initializing Witness Printer... [2018-12-09 06:44:16,987 INFO L276 PluginConnector]: Witness Printer initialized [2018-12-09 06:44:16,987 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 09.12 06:42:41" (3/4) ... [2018-12-09 06:44:16,989 INFO L147 WitnessPrinter]: No result that supports witness generation found [2018-12-09 06:44:16,990 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2018-12-09 06:44:16,990 INFO L168 Benchmark]: Toolchain (without parser) took 103017.86 ms. Allocated memory was 1.0 GB in the beginning and 6.8 GB in the end (delta: 5.8 GB). Free memory was 956.0 MB in the beginning and 3.0 GB in the end (delta: -2.0 GB). Peak memory consumption was 3.7 GB. Max. memory is 11.5 GB. [2018-12-09 06:44:16,991 INFO L168 Benchmark]: CDTParser took 0.10 ms. Allocated memory is still 1.0 GB. Free memory is still 982.3 MB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-09 06:44:16,991 INFO L168 Benchmark]: CACSL2BoogieTranslator took 472.77 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 149.9 MB). Free memory was 956.0 MB in the beginning and 1.1 GB in the end (delta: -153.9 MB). Peak memory consumption was 49.3 MB. Max. memory is 11.5 GB. [2018-12-09 06:44:16,991 INFO L168 Benchmark]: Boogie Procedure Inliner took 181.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 94.8 MB). Peak memory consumption was 94.8 MB. Max. memory is 11.5 GB. [2018-12-09 06:44:16,991 INFO L168 Benchmark]: Boogie Preprocessor took 256.86 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 934.6 MB in the end (delta: 80.4 MB). Peak memory consumption was 80.4 MB. Max. memory is 11.5 GB. [2018-12-09 06:44:16,991 INFO L168 Benchmark]: RCFGBuilder took 6957.33 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 420.5 MB). Free memory was 934.6 MB in the beginning and 800.7 MB in the end (delta: 134.0 MB). Peak memory consumption was 554.4 MB. Max. memory is 11.5 GB. [2018-12-09 06:44:16,992 INFO L168 Benchmark]: BuchiAutomizer took 95143.83 ms. Allocated memory was 1.6 GB in the beginning and 6.8 GB in the end (delta: 5.2 GB). Free memory was 800.7 MB in the beginning and 3.0 GB in the end (delta: -2.2 GB). Peak memory consumption was 3.0 GB. Max. memory is 11.5 GB. [2018-12-09 06:44:16,992 INFO L168 Benchmark]: Witness Printer took 3.21 ms. Allocated memory is still 6.8 GB. Free memory is still 3.0 GB. There was no memory consumed. Max. memory is 11.5 GB. [2018-12-09 06:44:16,994 INFO L336 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.10 ms. Allocated memory is still 1.0 GB. Free memory is still 982.3 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 472.77 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 149.9 MB). Free memory was 956.0 MB in the beginning and 1.1 GB in the end (delta: -153.9 MB). Peak memory consumption was 49.3 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 181.04 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 94.8 MB). Peak memory consumption was 94.8 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 256.86 ms. Allocated memory is still 1.2 GB. Free memory was 1.0 GB in the beginning and 934.6 MB in the end (delta: 80.4 MB). Peak memory consumption was 80.4 MB. Max. memory is 11.5 GB. * RCFGBuilder took 6957.33 ms. Allocated memory was 1.2 GB in the beginning and 1.6 GB in the end (delta: 420.5 MB). Free memory was 934.6 MB in the beginning and 800.7 MB in the end (delta: 134.0 MB). Peak memory consumption was 554.4 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 95143.83 ms. Allocated memory was 1.6 GB in the beginning and 6.8 GB in the end (delta: 5.2 GB). Free memory was 800.7 MB in the beginning and 3.0 GB in the end (delta: -2.2 GB). Peak memory consumption was 3.0 GB. Max. memory is 11.5 GB. * Witness Printer took 3.21 ms. Allocated memory is still 6.8 GB. Free memory is still 3.0 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 16 terminating modules (15 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 15 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 95.1s and 16 iterations. TraceHistogramMax:1. Analysis of lassos took 8.1s. Construction of modules took 34.3s. Büchi inclusion checks took 20.2s. Highest rank in rank-based complementation 3. Minimization of det autom 16. Minimization of nondet autom 0. Automata minimization 17.3s AutomataMinimizationTime, 14 MinimizatonAttempts, 1135385 StatesRemovedByMinimization, 14 NontrivialMinimizations. Non-live state removal took 11.2s Buchi closure took 1.0s. Biggest automaton had 136840 states and ocurred in iteration 14. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 316982 SDtfs, 1226205 SDslu, 590458 SDs, 0 SdLazy, 56168 SolverSat, 11185 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 34.3s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI14 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital741 mio100 ax100 hnf100 lsp20 ukn42 mio100 lsp100 div258 bol100 ite100 ukn100 eq135 hnf60 smp91 dnf773 smp23 tf100 neg99 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 3ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 3 SupportingInvariants: 0 MotzkinApplications: 6 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 64 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.9s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Forcibly destroying the process [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (1)] Rare case: The thread was killed right after we checked if it was killed and before we wanted to kill it manually Received shutdown request...