./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version cad46833 Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2d9788d6a4230717093c0eac3ed0e0e60c8a17a8 ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-cad4683 [2019-11-15 23:29:22,032 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-15 23:29:22,034 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-15 23:29:22,047 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-15 23:29:22,047 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-15 23:29:22,048 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-15 23:29:22,050 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-15 23:29:22,052 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-15 23:29:22,055 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-15 23:29:22,056 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-15 23:29:22,057 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-15 23:29:22,066 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-15 23:29:22,067 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-15 23:29:22,070 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-15 23:29:22,072 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-15 23:29:22,074 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-15 23:29:22,075 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-15 23:29:22,077 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-15 23:29:22,080 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-15 23:29:22,085 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-15 23:29:22,089 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-15 23:29:22,092 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-15 23:29:22,095 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-15 23:29:22,096 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-15 23:29:22,098 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-15 23:29:22,099 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-15 23:29:22,099 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-15 23:29:22,100 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-15 23:29:22,100 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-15 23:29:22,102 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-15 23:29:22,102 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-15 23:29:22,103 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-15 23:29:22,104 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-15 23:29:22,105 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-15 23:29:22,106 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-15 23:29:22,106 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-15 23:29:22,107 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-15 23:29:22,107 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-15 23:29:22,107 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-15 23:29:22,108 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-15 23:29:22,109 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-15 23:29:22,110 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-11-15 23:29:22,128 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-15 23:29:22,128 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-15 23:29:22,129 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-15 23:29:22,137 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-15 23:29:22,137 INFO L138 SettingsManager]: * Use SBE=true [2019-11-15 23:29:22,138 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-11-15 23:29:22,138 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-11-15 23:29:22,138 INFO L138 SettingsManager]: * Use old map elimination=false [2019-11-15 23:29:22,138 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-11-15 23:29:22,139 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-11-15 23:29:22,139 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-11-15 23:29:22,139 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-15 23:29:22,139 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-15 23:29:22,140 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-11-15 23:29:22,140 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-15 23:29:22,140 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-15 23:29:22,140 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-15 23:29:22,140 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-15 23:29:22,141 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-11-15 23:29:22,142 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-15 23:29:22,142 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-15 23:29:22,142 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-11-15 23:29:22,142 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-15 23:29:22,142 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-15 23:29:22,142 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-11-15 23:29:22,143 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-11-15 23:29:22,143 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2d9788d6a4230717093c0eac3ed0e0e60c8a17a8 [2019-11-15 23:29:22,171 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-15 23:29:22,189 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-15 23:29:22,196 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-15 23:29:22,199 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-15 23:29:22,200 INFO L275 PluginConnector]: CDTParser initialized [2019-11-15 23:29:22,201 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c [2019-11-15 23:29:22,282 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/data/b8a5962cb/add91bb28ae247808c4a150b3227b09a/FLAG3af539293 [2019-11-15 23:29:22,938 INFO L306 CDTParser]: Found 1 translation units. [2019-11-15 23:29:22,939 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c [2019-11-15 23:29:22,961 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/data/b8a5962cb/add91bb28ae247808c4a150b3227b09a/FLAG3af539293 [2019-11-15 23:29:23,092 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/data/b8a5962cb/add91bb28ae247808c4a150b3227b09a [2019-11-15 23:29:23,095 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-15 23:29:23,096 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-15 23:29:23,097 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-15 23:29:23,098 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-15 23:29:23,102 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-15 23:29:23,105 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.11 11:29:23" (1/1) ... [2019-11-15 23:29:23,108 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@71a2af83 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:23, skipping insertion in model container [2019-11-15 23:29:23,108 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 15.11 11:29:23" (1/1) ... [2019-11-15 23:29:23,114 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-11-15 23:29:23,202 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-11-15 23:29:23,948 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-15 23:29:23,964 INFO L188 MainTranslator]: Completed pre-run [2019-11-15 23:29:24,107 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-15 23:29:24,169 INFO L192 MainTranslator]: Completed translation [2019-11-15 23:29:24,170 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24 WrapperNode [2019-11-15 23:29:24,170 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-15 23:29:24,171 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-15 23:29:24,171 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-15 23:29:24,171 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-15 23:29:24,180 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:24,215 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:24,578 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-15 23:29:24,578 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-15 23:29:24,579 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-15 23:29:24,579 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-15 23:29:24,590 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:24,590 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:24,655 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:24,656 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:24,901 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:25,058 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:25,109 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... [2019-11-15 23:29:25,206 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-15 23:29:25,207 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-15 23:29:25,209 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-15 23:29:25,209 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-15 23:29:25,210 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:29:25,312 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-15 23:29:25,312 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-15 23:29:25,313 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-15 23:29:25,313 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-15 23:29:43,111 INFO L279 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-15 23:29:43,112 INFO L284 CfgBuilder]: Removed 1897 assume(true) statements. [2019-11-15 23:29:43,116 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.11 11:29:43 BoogieIcfgContainer [2019-11-15 23:29:43,116 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-15 23:29:43,117 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-11-15 23:29:43,117 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-11-15 23:29:43,120 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-11-15 23:29:43,121 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-15 23:29:43,121 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 15.11 11:29:23" (1/3) ... [2019-11-15 23:29:43,122 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@36a2c12b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.11 11:29:43, skipping insertion in model container [2019-11-15 23:29:43,122 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-15 23:29:43,122 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 15.11 11:29:24" (2/3) ... [2019-11-15 23:29:43,123 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@36a2c12b and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 15.11 11:29:43, skipping insertion in model container [2019-11-15 23:29:43,123 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-15 23:29:43,123 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.11 11:29:43" (3/3) ... [2019-11-15 23:29:43,125 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product21.cil.c [2019-11-15 23:29:43,171 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-11-15 23:29:43,172 INFO L357 BuchiCegarLoop]: Hoare is false [2019-11-15 23:29:43,172 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-11-15 23:29:43,172 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-15 23:29:43,172 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-15 23:29:43,173 INFO L361 BuchiCegarLoop]: Difference is false [2019-11-15 23:29:43,173 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-15 23:29:43,173 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-11-15 23:29:43,294 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8698 states. [2019-11-15 23:29:43,452 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1757 [2019-11-15 23:29:43,452 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:29:43,452 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:29:43,478 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:43,478 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:43,478 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-11-15 23:29:43,478 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8698 states. [2019-11-15 23:29:43,584 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1757 [2019-11-15 23:29:43,584 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:29:43,585 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:29:43,593 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:43,594 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:43,605 INFO L791 eck$LassoCheckResult]: Stem: 2690#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 8068#L-1true havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1273#L3392true havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1794#L3400true main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 7648#L385true assume 0 != main_~tmp~8; 7816#L358true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4131#L2207true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 4054#L444true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3771#L469true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7322#L2485true assume 0 == initPersonOnFloor_~floor; 7269#L2486true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3188#L2593-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5589#L2277true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8075#L2289-2true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6860#L844true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8306#L896true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8450#L2832true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8325#L2833true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5125#L861true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7933#L882true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7247#L2837true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3528#L2938true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2117#L1525true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6862#L844-1true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5093#L861-10true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7898#L882-10true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3186#L1536true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4170#L1675true assume !(0 != timeShift_~tmp___9~2); 7776#L1766true assume !(1 == ~doorState~0); 7764#L1766-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7297#L1428true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1354#L1449true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5508#L1401true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5567#L1048-2true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5038#L1217-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5955#L1370-2true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8476#L1419true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8409#L1774true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1695#L1463true assume !(1 == ~currentHeading~0); 430#L1473true assume !(0 == ~currentFloorID~0); 434#L1473-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 31#L1479-5true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6695#L2963true assume !(-1 == ~expectedDirection~0); 5147#L2975true assume !(1 == ~expectedDirection~0); 5067#L2976true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6864#L844-2true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8298#L896-3true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8449#L2832-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8327#L2833-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5099#L861-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7905#L882-12true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7325#L2837-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3492#L2938-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2084#L1525-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6948#L844-3true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5074#L861-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8052#L882-22true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3187#L1536-1true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4173#L1675-1true assume !(0 != timeShift_~tmp___9~2); 7762#L1766-3true assume !(1 == ~doorState~0); 7768#L1766-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7304#L1428-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1357#L1449-2true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5516#L1401-2true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5558#L1048-8true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5720#L1217-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5946#L1370-8true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8462#L1419-2true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8410#L1774-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1671#L1463-3true assume !(1 == ~currentHeading~0); 205#L1473-9true assume !(0 == ~currentFloorID~0); 207#L1473-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25#L1479-11true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6697#L2963-1true assume !(-1 == ~expectedDirection~0); 5121#L2975-1true assume !(1 == ~expectedDirection~0); 5064#L2976-1true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6950#L844-4true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8303#L896-6true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8446#L2832-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8326#L2833-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5078#L861-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8057#L882-24true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7333#L2837-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3498#L2938-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2085#L1525-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6952#L844-5true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5027#L861-34true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8026#L882-34true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3178#L1536-2true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4154#L1675-2true assume !(0 != timeShift_~tmp___9~2); 7770#L1766-6true assume 1 == ~doorState~0;~doorState~0 := 0; 7862#L1766-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7309#L1428-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1360#L1449-4true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5524#L1401-4true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5549#L1048-14true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5707#L1217-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5939#L1370-14true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8465#L1419-4true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8412#L1774-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1679#L1463-6true assume !(1 == ~currentHeading~0); 201#L1473-18true assume !(0 == ~currentFloorID~0); 185#L1473-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20#L1479-17true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6702#L2963-2true assume !(-1 == ~expectedDirection~0); 5126#L2975-2true assume !(1 == ~expectedDirection~0); 5018#L2976-2true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 4056#L444-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3735#L469-1true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7299#L2485-1true assume 0 == initPersonOnFloor_~floor; 7195#L2486-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3177#L2593-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5588#L2277-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8065#L2289-5true havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6954#L844-6true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8292#L896-9true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8447#L2832-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8321#L2833-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5010#L861-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8004#L882-36true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7336#L2837-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3495#L2938-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2090#L1525-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6958#L844-7true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5008#L861-46true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7981#L882-46true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3179#L1536-3true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4157#L1675-3true assume !(0 != timeShift_~tmp___9~2); 7866#L1766-9true assume !(1 == ~doorState~0); 7868#L1766-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7289#L1428-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1348#L1449-6true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5495#L1401-6true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5509#L1048-20true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5693#L1217-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5935#L1370-20true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8469#L1419-6true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8411#L1774-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1657#L1463-9true assume !(1 == ~currentHeading~0); 180#L1473-27true assume !(0 == ~currentFloorID~0); 159#L1473-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14#L1479-23true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6706#L2963-3true assume !(-1 == ~expectedDirection~0); 5135#L2975-3true assume !(1 == ~expectedDirection~0); 5023#L2976-3true cleanup_~i~0 := 0; 8419#L188-2true [2019-11-15 23:29:43,608 INFO L793 eck$LassoCheckResult]: Loop: 8419#L188-2true assume !false; 8451#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 8404#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 5744#L691true cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 7204#L196true assume 1 != cleanup_~tmp___0~0; 7202#L196-1true havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2636#L2214-244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 6104#L2241-244true anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 67#L952true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 6055#L1016true isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 6644#L1029true cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 7576#L208true assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6935#L844-8true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8402#L896-12true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8448#L2832-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8322#L2833-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 4999#L861-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7985#L882-48true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7316#L2837-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3504#L2938-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2093#L1525-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6938#L844-9true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 4991#L861-58true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7970#L882-58true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3180#L1536-4true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4160#L1675-4true assume !(0 != timeShift_~tmp___9~2); 7869#L1766-12true assume !(1 == ~doorState~0); 7856#L1766-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7293#L1428-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1351#L1449-8true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5501#L1401-8true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5497#L1048-26true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5683#L1217-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5928#L1370-26true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8454#L1419-8true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8413#L1774-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1664#L1463-12true assume !(1 == ~currentHeading~0); 138#L1473-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 146#L1473-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8#L1479-29true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6704#L2963-4true assume !(-1 == ~expectedDirection~0); 5131#L2975-4true assume !(1 == ~expectedDirection~0); 5028#L2976-4true cleanup_~i~0 := 1 + cleanup_~i~0; 8419#L188-2true [2019-11-15 23:29:43,614 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:29:43,615 INFO L82 PathProgramCache]: Analyzing trace with hash 1722019930, now seen corresponding path program 1 times [2019-11-15 23:29:43,623 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:29:43,624 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1192270149] [2019-11-15 23:29:43,624 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:43,624 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:43,625 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:29:43,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:29:44,130 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:29:44,131 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1192270149] [2019-11-15 23:29:44,133 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:29:44,133 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:29:44,135 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1314477524] [2019-11-15 23:29:44,141 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:29:44,141 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:29:44,142 INFO L82 PathProgramCache]: Analyzing trace with hash 613728287, now seen corresponding path program 1 times [2019-11-15 23:29:44,142 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:29:44,142 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [887563062] [2019-11-15 23:29:44,143 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:44,143 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:44,144 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:29:44,170 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:29:44,309 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:29:44,311 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [887563062] [2019-11-15 23:29:44,311 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:29:44,311 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-15 23:29:44,312 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [521985164] [2019-11-15 23:29:44,314 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:29:44,315 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:29:44,331 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-15 23:29:44,332 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-15 23:29:44,334 INFO L87 Difference]: Start difference. First operand 8698 states. Second operand 7 states. [2019-11-15 23:29:54,536 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:29:54,536 INFO L93 Difference]: Finished difference Result 27536 states and 51721 transitions. [2019-11-15 23:29:54,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-11-15 23:29:54,539 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27536 states and 51721 transitions. [2019-11-15 23:29:54,864 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6204 [2019-11-15 23:29:55,110 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27536 states to 27432 states and 51600 transitions. [2019-11-15 23:29:55,112 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27432 [2019-11-15 23:29:55,162 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27432 [2019-11-15 23:29:55,163 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27432 states and 51600 transitions. [2019-11-15 23:29:55,223 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:29:55,223 INFO L688 BuchiCegarLoop]: Abstraction has 27432 states and 51600 transitions. [2019-11-15 23:29:55,279 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27432 states and 51600 transitions. [2019-11-15 23:29:55,710 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27432 to 13730. [2019-11-15 23:29:55,711 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13730 states. [2019-11-15 23:29:55,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13730 states to 13730 states and 25850 transitions. [2019-11-15 23:29:55,750 INFO L711 BuchiCegarLoop]: Abstraction has 13730 states and 25850 transitions. [2019-11-15 23:29:55,750 INFO L591 BuchiCegarLoop]: Abstraction has 13730 states and 25850 transitions. [2019-11-15 23:29:55,750 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-11-15 23:29:55,750 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13730 states and 25850 transitions. [2019-11-15 23:29:55,812 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3039 [2019-11-15 23:29:55,813 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:29:55,813 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:29:55,824 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:55,824 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:55,826 INFO L791 eck$LassoCheckResult]: Stem: 40299#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 40300#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 38227#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 38228#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 38770#L385 assume 0 != main_~tmp~8; 44644#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 41525#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 41383#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 39609#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 41251#L2485 assume 0 == initPersonOnFloor_~floor; 44347#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 36967#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 40844#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42625#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 43940#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 43941#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45137#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 45154#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 42325#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42326#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 44307#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 36922#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39325#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 39326#L2214 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 39214#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 40818#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 41465#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40840#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40841#L1675 assume !(0 != timeShift_~tmp___9~2); 41579#L1766 assume !(1 == ~doorState~0); 44695#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 44370#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 38318#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 38319#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 42985#L1048-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~22;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~22;isTopFloor_~retValue_acc~22 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~22; 43046#L2788-2 stopRequestedInDirection__wrappee__weight_#t~ret28 := isTopFloor_#res;stopRequestedInDirection__wrappee__weight_~tmp~15 := stopRequestedInDirection__wrappee__weight_#t~ret28;havoc stopRequestedInDirection__wrappee__weight_#t~ret28; 43860#L1052-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~15;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 36770#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 43358#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 45180#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 38693#L1463 assume !(1 == ~currentHeading~0); 37013#L1473 assume !(0 == ~currentFloorID~0); 37014#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36757#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 47091#L2963 assume !(-1 == ~expectedDirection~0); 47088#L2975 assume !(1 == ~expectedDirection~0); 47086#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 47085#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 47084#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 47083#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 47082#L2894-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 47081#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 42093#L2915-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40656#L2926-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40657#L2937-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37054#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39241#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39243#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43946#L861-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42585#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 48188#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 48186#L1675-1 assume !(0 != timeShift_~tmp___9~2); 48185#L1766-3 assume !(1 == ~doorState~0); 48184#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48183#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48178#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48176#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48177#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 49575#L1217-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 49570#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 49568#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 49566#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 49567#L1463-3 assume !(1 == ~currentHeading~0); 49717#L1473-9 assume !(0 == ~currentFloorID~0); 36761#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36333#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36334#L2963-1 assume !(-1 == ~expectedDirection~0); 42318#L2975-1 assume !(1 == ~expectedDirection~0); 42320#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 45307#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 45306#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45305#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37572#L2894-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37574#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41807#L2915-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40662#L2926-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40664#L2937-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37059#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39244#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39246#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43948#L861-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42554#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40824#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40825#L1675-2 assume !(0 != timeShift_~tmp___9~2); 41559#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 48085#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48083#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48079#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48077#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48076#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 48049#L1217-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 48035#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 48032#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 48031#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 38673#L1463-6 assume !(1 == ~currentHeading~0); 38674#L1473-18 assume !(0 == ~currentFloorID~0); 36718#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36319#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36320#L2963-2 assume !(-1 == ~expectedDirection~0); 42328#L2975-2 assume !(1 == ~expectedDirection~0); 42160#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 41386#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 39616#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 41240#L2485-1 assume 0 == initPersonOnFloor_~floor; 44268#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 36950#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 40823#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42588#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 45330#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 45329#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45328#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37566#L2894-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37568#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41809#L2915-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40659#L2926-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40661#L2937-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37050#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39256#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39258#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43951#L861-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42845#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40826#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40827#L1675-3 assume !(0 != timeShift_~tmp___9~2); 41562#L1766-9 assume !(1 == ~doorState~0); 48028#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48025#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48017#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48014#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48015#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 48164#L1217-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 48165#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 45218#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 45219#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 47951#L1463-9 assume !(1 == ~currentHeading~0); 47950#L1473-27 assume !(0 == ~currentFloorID~0); 36665#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36302#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36303#L2963-3 assume !(-1 == ~expectedDirection~0); 42344#L2975-3 assume !(1 == ~expectedDirection~0); 42167#L2976-3 cleanup_~i~0 := 0; 42168#L188-2 [2019-11-15 23:29:55,828 INFO L793 eck$LassoCheckResult]: Loop: 42168#L188-2 assume !false; 45192#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 45178#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 43136#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 43137#L196 assume 1 != cleanup_~tmp___0~0; 44279#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 40247#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 39283#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 36457#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 36458#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 43439#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 43762#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 43943#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 43944#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45177#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37575#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37576#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41803#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40668#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40670#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37052#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39264#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39266#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43945#L861-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42797#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40828#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40829#L1675-4 assume !(0 != timeShift_~tmp___9~2); 41565#L1766-12 assume !(1 == ~doorState~0); 47990#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 47986#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 47982#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 47980#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 47974#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 47972#L1217-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 36632#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 43348#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 47095#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 47094#L1463-12 assume !(1 == ~currentHeading~0); 47093#L1473-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 36626#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36285#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36286#L2963-4 assume !(-1 == ~expectedDirection~0); 42337#L2975-4 assume !(1 == ~expectedDirection~0); 42175#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 42168#L188-2 [2019-11-15 23:29:55,828 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:29:55,829 INFO L82 PathProgramCache]: Analyzing trace with hash 1044669180, now seen corresponding path program 1 times [2019-11-15 23:29:55,830 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:29:55,830 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1215686183] [2019-11-15 23:29:55,831 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:55,831 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:55,832 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:29:55,871 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:29:55,972 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:29:55,973 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1215686183] [2019-11-15 23:29:55,973 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:29:55,974 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:29:55,974 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1708006537] [2019-11-15 23:29:55,976 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:29:55,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:29:55,978 INFO L82 PathProgramCache]: Analyzing trace with hash -205289530, now seen corresponding path program 1 times [2019-11-15 23:29:55,979 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:29:55,979 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [773461315] [2019-11-15 23:29:55,979 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:55,979 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:55,979 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:29:56,000 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:29:56,040 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:29:56,041 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [773461315] [2019-11-15 23:29:56,041 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:29:56,041 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-15 23:29:56,041 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [398371176] [2019-11-15 23:29:56,042 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:29:56,042 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:29:56,042 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-15 23:29:56,042 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-15 23:29:56,043 INFO L87 Difference]: Start difference. First operand 13730 states and 25850 transitions. cyclomatic complexity: 12121 Second operand 5 states. [2019-11-15 23:29:57,645 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:29:57,646 INFO L93 Difference]: Finished difference Result 21693 states and 40682 transitions. [2019-11-15 23:29:57,647 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-15 23:29:57,647 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21693 states and 40682 transitions. [2019-11-15 23:29:57,764 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5117 [2019-11-15 23:29:57,858 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21693 states to 21693 states and 40682 transitions. [2019-11-15 23:29:57,859 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21693 [2019-11-15 23:29:57,888 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21693 [2019-11-15 23:29:57,888 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21693 states and 40682 transitions. [2019-11-15 23:29:57,912 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:29:57,912 INFO L688 BuchiCegarLoop]: Abstraction has 21693 states and 40682 transitions. [2019-11-15 23:29:57,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21693 states and 40682 transitions. [2019-11-15 23:29:58,215 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21693 to 13775. [2019-11-15 23:29:58,215 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13775 states. [2019-11-15 23:29:58,250 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13775 states to 13775 states and 25895 transitions. [2019-11-15 23:29:58,251 INFO L711 BuchiCegarLoop]: Abstraction has 13775 states and 25895 transitions. [2019-11-15 23:29:58,251 INFO L591 BuchiCegarLoop]: Abstraction has 13775 states and 25895 transitions. [2019-11-15 23:29:58,251 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-11-15 23:29:58,251 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13775 states and 25895 transitions. [2019-11-15 23:29:58,309 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3049 [2019-11-15 23:29:58,309 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:29:58,310 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:29:58,316 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:58,317 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:29:58,318 INFO L791 eck$LassoCheckResult]: Stem: 75748#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 75749#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 73680#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 73681#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 74220#L385 assume 0 != main_~tmp~8; 80132#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 77000#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 76857#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75060#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76725#L2485 assume 0 == initPersonOnFloor_~floor; 79823#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72409#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 76308#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78085#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 79422#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79423#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80588#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80605#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77786#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77787#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79784#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72363#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74777#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74778#L2214 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74667#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 76282#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76940#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76304#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76305#L1675 assume !(0 != timeShift_~tmp___9~2); 77057#L1766 assume !(1 == ~doorState~0); 80175#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79846#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73769#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73770#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78446#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 77659#L1217-2 assume !(0 == ~currentFloorID~0); 77660#L1223-2 assume !(~currentFloorID~0 > 0); 78175#L1238-2 assume ~currentFloorID~0 > 0; 80301#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80727#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72203#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 80678#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80679#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74143#L1463 assume !(1 == ~currentHeading~0); 72454#L1473 assume !(0 == ~currentFloorID~0); 72455#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71791#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71792#L2963 assume !(-1 == ~expectedDirection~0); 77826#L2975 assume !(1 == ~expectedDirection~0); 77700#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 77701#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79424#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80581#L2832-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80659#L2833-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77744#L861-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77745#L882-12 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79869#L2837-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72496#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74691#L1525-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74692#L2214-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74480#L2241-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77208#L1496-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76911#L1508-1 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76306#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76307#L1675-1 assume !(0 != timeShift_~tmp___9~2); 77062#L1766-3 assume !(1 == ~doorState~0); 80174#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79851#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73774#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73775#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78454#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78503#L1217-8 assume !(0 == ~currentFloorID~0); 78397#L1223-8 assume !(~currentFloorID~0 > 0); 78398#L1238-8 assume ~currentFloorID~0 > 0; 80283#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80723#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72148#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78801#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80667#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74110#L1463-3 assume !(1 == ~currentHeading~0); 72193#L1473-9 assume !(0 == ~currentFloorID~0); 72194#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71774#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71775#L2963-1 assume !(-1 == ~expectedDirection~0); 77780#L2975-1 assume !(1 == ~expectedDirection~0); 77695#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 77696#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79427#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80585#L2832-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80606#L2833-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77715#L861-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77717#L882-24 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79877#L2837-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72928#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 82130#L1525-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 82128#L2214-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 82124#L2241-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 82115#L1496-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 82114#L1508-2 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 82112#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 82106#L1675-2 assume !(0 != timeShift_~tmp___9~2); 80186#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 80187#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79855#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73779#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73780#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78463#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78492#L1217-14 assume !(0 == ~currentFloorID~0); 78347#L1223-14 assume !(~currentFloorID~0 > 0); 78349#L1238-14 assume ~currentFloorID~0 > 0; 80272#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80718#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72128#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78800#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80669#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 80744#L1463-6 assume !(1 == ~currentHeading~0); 72186#L1473-18 assume !(0 == ~currentFloorID~0); 72152#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71760#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71761#L2963-2 assume !(-1 == ~expectedDirection~0); 77789#L2975-2 assume !(1 == ~expectedDirection~0); 77628#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 76860#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75065#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76717#L2485-1 assume 0 == initPersonOnFloor_~floor; 79744#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72391#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 76287#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78048#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 81463#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 81457#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81454#L2832-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 81455#L2833-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77614#L861-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77615#L882-36 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79881#L2837-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72491#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74706#L1525-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74707#L2214-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74453#L2241-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77213#L1496-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76919#L1508-3 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76290#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76291#L1675-3 assume !(0 != timeShift_~tmp___9~2); 77039#L1766-9 assume !(1 == ~doorState~0); 80339#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79841#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73759#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73760#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78429#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78447#L1217-20 assume !(0 == ~currentFloorID~0); 78332#L1223-20 assume !(~currentFloorID~0 > 0); 78333#L1238-20 assume ~currentFloorID~0 > 0; 80265#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80739#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72238#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78798#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80912#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 80743#L1463-9 assume !(1 == ~currentHeading~0); 72140#L1473-27 assume !(0 == ~currentFloorID~0); 72101#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71743#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71744#L2963-3 assume !(-1 == ~expectedDirection~0); 77801#L2975-3 assume !(1 == ~expectedDirection~0); 77633#L2976-3 cleanup_~i~0 := 0; 77634#L188-2 [2019-11-15 23:29:58,319 INFO L793 eck$LassoCheckResult]: Loop: 77634#L188-2 assume !false; 80643#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 80634#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 78596#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 78597#L196 assume 1 != cleanup_~tmp___0~0; 79754#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 75695#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74730#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 71898#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 71899#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 78895#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 79244#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 81671#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 81670#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81668#L2832-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 81667#L2833-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77597#L861-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77598#L882-48 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79861#L2837-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72493#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74714#L1525-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74715#L2214-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74677#L2241-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77202#L1496-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76921#L1508-4 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76292#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76293#L1675-4 assume !(0 != timeShift_~tmp___9~2); 77043#L1766-12 assume !(1 == ~doorState~0); 80322#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79844#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73764#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73765#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78430#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78431#L1217-26 assume !(0 == ~currentFloorID~0); 78317#L1223-26 assume !(~currentFloorID~0 > 0); 78318#L1238-26 assume ~currentFloorID~0 > 0; 80260#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80734#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 71902#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78795#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80661#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74101#L1463-12 assume !(1 == ~currentHeading~0); 72064#L1473-36 assume !(0 == ~currentFloorID~0); 72065#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71726#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71727#L2963-4 assume !(-1 == ~expectedDirection~0); 77794#L2975-4 assume !(1 == ~expectedDirection~0); 77639#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 77634#L188-2 [2019-11-15 23:29:58,320 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:29:58,320 INFO L82 PathProgramCache]: Analyzing trace with hash 1222042957, now seen corresponding path program 1 times [2019-11-15 23:29:58,320 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:29:58,321 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1001709933] [2019-11-15 23:29:58,321 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:58,321 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:58,321 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:29:58,351 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:29:58,434 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:29:58,434 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1001709933] [2019-11-15 23:29:58,435 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:29:58,435 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:29:58,435 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [711665127] [2019-11-15 23:29:58,435 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:29:58,436 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:29:58,436 INFO L82 PathProgramCache]: Analyzing trace with hash -551793799, now seen corresponding path program 1 times [2019-11-15 23:29:58,436 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:29:58,437 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1399892271] [2019-11-15 23:29:58,437 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:58,437 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:29:58,437 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:29:58,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:29:58,509 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:29:58,509 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1399892271] [2019-11-15 23:29:58,510 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:29:58,510 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-15 23:29:58,510 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1423019086] [2019-11-15 23:29:58,510 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:29:58,511 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:29:58,511 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-15 23:29:58,511 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-15 23:29:58,511 INFO L87 Difference]: Start difference. First operand 13775 states and 25895 transitions. cyclomatic complexity: 12121 Second operand 6 states. [2019-11-15 23:30:09,278 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:09,278 INFO L93 Difference]: Finished difference Result 24876 states and 46385 transitions. [2019-11-15 23:30:09,278 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-15 23:30:09,279 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24876 states and 46385 transitions. [2019-11-15 23:30:09,384 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5535 [2019-11-15 23:30:09,502 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24876 states to 24876 states and 46385 transitions. [2019-11-15 23:30:09,502 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24876 [2019-11-15 23:30:09,525 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24876 [2019-11-15 23:30:09,525 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24876 states and 46385 transitions. [2019-11-15 23:30:09,557 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:09,557 INFO L688 BuchiCegarLoop]: Abstraction has 24876 states and 46385 transitions. [2019-11-15 23:30:09,585 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24876 states and 46385 transitions. [2019-11-15 23:30:10,025 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24876 to 13775. [2019-11-15 23:30:10,026 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13775 states. [2019-11-15 23:30:10,058 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13775 states to 13775 states and 25546 transitions. [2019-11-15 23:30:10,058 INFO L711 BuchiCegarLoop]: Abstraction has 13775 states and 25546 transitions. [2019-11-15 23:30:10,059 INFO L591 BuchiCegarLoop]: Abstraction has 13775 states and 25546 transitions. [2019-11-15 23:30:10,059 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-11-15 23:30:10,059 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13775 states and 25546 transitions. [2019-11-15 23:30:10,110 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3049 [2019-11-15 23:30:10,111 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:10,111 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:10,117 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:10,118 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:10,118 INFO L791 eck$LassoCheckResult]: Stem: 114438#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 114439#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 112337#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 112338#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 112888#L385 assume 0 != main_~tmp~8; 119075#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 115739#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 115597#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 113729#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 115452#L2485 assume 0 == initPersonOnFloor_~floor; 118742#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 111086#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115028#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116891#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118343#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118344#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119544#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119561#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116595#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116596#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118703#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111041#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 113444#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 113446#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116543#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 116544#L865-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116944#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 115024#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 115025#L1675 assume !(0 != timeShift_~tmp___9~2); 115802#L1766 assume !(1 == ~doorState~0); 119131#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 118765#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 112426#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 112427#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 117245#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 116465#L1217-2 assume !(0 == ~currentFloorID~0); 116466#L1223-2 assume !(~currentFloorID~0 > 0); 116981#L1238-2 assume ~currentFloorID~0 > 0; 119256#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119672#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110886#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 119687#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 119686#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112811#L1463 assume !(1 == ~currentHeading~0); 111132#L1473 assume !(0 == ~currentFloorID~0); 111133#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110471#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110472#L2963 assume !(-1 == ~expectedDirection~0); 116635#L2975 assume !(1 == ~expectedDirection~0); 116506#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 116507#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118345#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119537#L2832-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119563#L2833-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116552#L861-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116553#L882-12 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118789#L2837-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111630#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 119688#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 119689#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 122836#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 122834#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 122818#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 122812#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 122809#L1675-1 assume !(0 != timeShift_~tmp___9~2); 122810#L1766-3 assume !(1 == ~doorState~0); 123979#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123978#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123973#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123971#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123972#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117391#L1217-8 assume !(0 == ~currentFloorID~0); 117196#L1223-8 assume !(~currentFloorID~0 > 0); 117197#L1238-8 assume ~currentFloorID~0 > 0; 119236#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119668#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110831#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 124060#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 124058#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112781#L1463-3 assume !(1 == ~currentHeading~0); 110876#L1473-9 assume !(0 == ~currentFloorID~0); 110877#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110454#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110455#L2963-1 assume !(-1 == ~expectedDirection~0); 116589#L2975-1 assume !(1 == ~expectedDirection~0); 116501#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 116502#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118348#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119541#L2832-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119562#L2833-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116523#L861-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116525#L882-24 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118798#L2837-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111605#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 121742#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 121743#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 121794#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 121793#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 121728#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 121727#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 121720#L1675-2 assume !(0 != timeShift_~tmp___9~2); 121721#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 123654#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123649#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123644#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123634#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123632#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117389#L1217-14 assume !(0 == ~currentFloorID~0); 117147#L1223-14 assume !(~currentFloorID~0 > 0); 117149#L1238-14 assume ~currentFloorID~0 > 0; 119227#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119663#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110938#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123543#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 123540#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112792#L1463-6 assume !(1 == ~currentHeading~0); 110869#L1473-18 assume !(0 == ~currentFloorID~0); 110835#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110440#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110441#L2963-2 assume !(-1 == ~expectedDirection~0); 116598#L2975-2 assume !(1 == ~expectedDirection~0); 116431#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 115600#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 113736#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 115438#L2485-1 assume 0 == initPersonOnFloor_~floor; 118664#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 111069#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115007#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116855#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118349#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118350#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119534#L2832-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119607#L2833-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116419#L861-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116420#L882-36 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118802#L2837-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111612#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 121052#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 121053#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 121106#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 121057#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 121039#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 121037#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 121035#L1675-3 assume !(0 != timeShift_~tmp___9~2); 121036#L1766-9 assume !(1 == ~doorState~0); 123726#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123722#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123719#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123718#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 117246#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117247#L1217-20 assume !(0 == ~currentFloorID~0); 117132#L1223-20 assume !(~currentFloorID~0 > 0); 117133#L1238-20 assume ~currentFloorID~0 > 0; 119220#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119684#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110791#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 124059#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 124057#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112763#L1463-9 assume !(1 == ~currentHeading~0); 110823#L1473-27 assume !(0 == ~currentFloorID~0); 110784#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110423#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110424#L2963-3 assume !(-1 == ~expectedDirection~0); 116614#L2975-3 assume !(1 == ~expectedDirection~0); 116438#L2976-3 cleanup_~i~0 := 0; 116439#L188-2 [2019-11-15 23:30:10,120 INFO L793 eck$LassoCheckResult]: Loop: 116439#L188-2 assume !false; 119592#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 119583#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 117396#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 117397#L196 assume 1 != cleanup_~tmp___0~0; 118675#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 114386#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 113402#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 110578#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 110579#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 117754#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 118159#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118346#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118347#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119582#L2832-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119559#L2833-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116401#L861-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116402#L882-48 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118780#L2837-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111616#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 119730#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 119731#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 122246#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 122245#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 122228#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 122227#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 122220#L1675-4 assume !(0 != timeShift_~tmp___9~2); 122221#L1766-12 assume !(1 == ~doorState~0); 123653#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123639#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123633#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123630#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123631#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117387#L1217-26 assume !(0 == ~currentFloorID~0); 117117#L1223-26 assume !(~currentFloorID~0 > 0); 117118#L1238-26 assume ~currentFloorID~0 > 0; 119215#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119679#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110582#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123461#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 123460#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112771#L1463-12 assume !(1 == ~currentHeading~0); 110746#L1473-36 assume !(0 == ~currentFloorID~0); 110747#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110406#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110407#L2963-4 assume !(-1 == ~expectedDirection~0); 116607#L2975-4 assume !(1 == ~expectedDirection~0); 116447#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 116439#L188-2 [2019-11-15 23:30:10,120 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:10,121 INFO L82 PathProgramCache]: Analyzing trace with hash -435274073, now seen corresponding path program 1 times [2019-11-15 23:30:10,121 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:10,121 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [252134951] [2019-11-15 23:30:10,121 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:10,122 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:10,122 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:10,162 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:10,246 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:10,248 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [252134951] [2019-11-15 23:30:10,248 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:10,249 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:10,249 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1107554353] [2019-11-15 23:30:10,250 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:10,250 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:10,250 INFO L82 PathProgramCache]: Analyzing trace with hash -413829828, now seen corresponding path program 1 times [2019-11-15 23:30:10,250 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:10,251 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1543086954] [2019-11-15 23:30:10,251 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:10,251 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:10,251 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:10,263 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:10,326 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:10,326 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1543086954] [2019-11-15 23:30:10,327 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:10,327 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-15 23:30:10,327 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1954526181] [2019-11-15 23:30:10,327 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:10,328 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:10,328 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-15 23:30:10,328 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-15 23:30:10,328 INFO L87 Difference]: Start difference. First operand 13775 states and 25546 transitions. cyclomatic complexity: 11772 Second operand 7 states. [2019-11-15 23:30:18,792 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:18,792 INFO L93 Difference]: Finished difference Result 37926 states and 70312 transitions. [2019-11-15 23:30:18,798 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-11-15 23:30:18,798 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37926 states and 70312 transitions. [2019-11-15 23:30:19,203 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8880 [2019-11-15 23:30:19,317 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37926 states to 37926 states and 70312 transitions. [2019-11-15 23:30:19,318 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37926 [2019-11-15 23:30:19,342 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37926 [2019-11-15 23:30:19,342 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37926 states and 70312 transitions. [2019-11-15 23:30:19,374 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:19,375 INFO L688 BuchiCegarLoop]: Abstraction has 37926 states and 70312 transitions. [2019-11-15 23:30:19,404 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37926 states and 70312 transitions. [2019-11-15 23:30:19,699 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37926 to 17507. [2019-11-15 23:30:19,708 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17507 states. [2019-11-15 23:30:19,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17507 states to 17507 states and 32458 transitions. [2019-11-15 23:30:19,751 INFO L711 BuchiCegarLoop]: Abstraction has 17507 states and 32458 transitions. [2019-11-15 23:30:19,751 INFO L591 BuchiCegarLoop]: Abstraction has 17507 states and 32458 transitions. [2019-11-15 23:30:19,751 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-11-15 23:30:19,752 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17507 states and 32458 transitions. [2019-11-15 23:30:19,814 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4034 [2019-11-15 23:30:19,815 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:19,815 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:19,819 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:19,820 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:19,820 INFO L791 eck$LassoCheckResult]: Stem: 166108#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 166109#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 164043#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 164044#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 164576#L385 assume 0 != main_~tmp~8; 170421#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 167327#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 167185#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 165422#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167061#L2485 assume 0 == initPersonOnFloor_~floor; 170110#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 162818#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 166649#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 168403#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 169705#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 169706#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 170888#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 170905#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 168102#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168103#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 170071#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 162771#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 165138#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 165139#L2214 assume !(0 == isFloorCalling_~floorID); 167730#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 165029#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 166623#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 167267#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 166645#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 166646#L1675 assume !(0 != timeShift_~tmp___9~2); 167380#L1766 assume !(1 == ~doorState~0); 170460#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170133#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164132#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164133#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168762#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 167970#L1217-2 assume !(0 == ~currentFloorID~0); 167971#L1223-2 assume !(~currentFloorID~0 > 0); 168493#L1238-2 assume ~currentFloorID~0 > 0; 170586#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171016#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162620#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 171031#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 171030#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164499#L1463 assume !(1 == ~currentHeading~0); 162862#L1473 assume !(0 == ~currentFloorID~0); 162863#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162205#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 162206#L2963 assume !(-1 == ~expectedDirection~0); 168144#L2975 assume !(1 == ~expectedDirection~0); 168145#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 176487#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 176486#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 170955#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 163410#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163411#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 170654#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 170655#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 173496#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 173494#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 173495#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 168023#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 168024#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 173484#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 173478#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 173476#L1675-1 assume !(0 != timeShift_~tmp___9~2); 167383#L1766-3 assume !(1 == ~doorState~0); 170459#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170138#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164137#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164138#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168770#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168813#L1217-8 assume !(0 == ~currentFloorID~0); 168714#L1223-8 assume !(~currentFloorID~0 > 0); 168715#L1238-8 assume ~currentFloorID~0 > 0; 170568#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171012#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162564#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 179630#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 179629#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164469#L1463-3 assume !(1 == ~currentHeading~0); 162610#L1473-9 assume !(0 == ~currentFloorID~0); 162611#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162584#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 171738#L2963-1 assume !(-1 == ~expectedDirection~0); 171450#L2975-1 assume !(1 == ~expectedDirection~0); 171433#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171416#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171413#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171410#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171406#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163419#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168010#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 163335#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 162908#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 165053#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 165055#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 169713#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 171350#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168332#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 175705#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 175699#L1675-2 assume !(0 != timeShift_~tmp___9~2); 170471#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 170472#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170142#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164142#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164143#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168778#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168803#L1217-14 assume !(0 == ~currentFloorID~0); 168664#L1223-14 assume !(~currentFloorID~0 > 0); 168666#L1238-14 assume ~currentFloorID~0 > 0; 170557#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171007#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162544#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 179579#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 179578#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164480#L1463-6 assume !(1 == ~currentHeading~0); 162603#L1473-18 assume !(0 == ~currentFloorID~0); 162568#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162174#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 162175#L2963-2 assume !(-1 == ~expectedDirection~0); 168105#L2975-2 assume !(1 == ~expectedDirection~0); 167938#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 167188#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 165425#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167053#L2485-1 assume 0 == initPersonOnFloor_~floor; 170032#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 162799#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 166628#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 168363#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171919#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171918#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171867#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171818#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163414#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 170785#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 170786#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 171741#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 171740#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171443#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 167922#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 167923#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168624#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 166631#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 166632#L1675-3 assume !(0 != timeShift_~tmp___9~2); 167361#L1766-9 assume !(1 == ~doorState~0); 170624#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170128#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164122#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164123#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168745#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168763#L1217-20 assume !(0 == ~currentFloorID~0); 168649#L1223-20 assume !(~currentFloorID~0 > 0); 168650#L1238-20 assume ~currentFloorID~0 > 0; 170550#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171028#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162524#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 178616#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 178615#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164451#L1463-9 assume !(1 == ~currentHeading~0); 162556#L1473-27 assume !(0 == ~currentFloorID~0); 162517#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162479#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 178637#L2963-3 assume !(-1 == ~expectedDirection~0); 178630#L2975-3 assume !(1 == ~expectedDirection~0); 178625#L2976-3 cleanup_~i~0 := 0; 178624#L188-2 [2019-11-15 23:30:19,822 INFO L793 eck$LassoCheckResult]: Loop: 178624#L188-2 assume !false; 178623#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 178622#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 178621#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 178620#L196 assume 1 != cleanup_~tmp___0~0; 178619#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 166056#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 165092#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 162312#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 162313#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 169214#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 169528#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171800#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171799#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171797#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171342#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 171341#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 171340#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 171339#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 171313#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 171303#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 171300#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171291#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 171289#L861-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 171284#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 171283#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 171282#L1675-4 assume !(0 != timeShift_~tmp___9~2); 171280#L1766-12 assume !(1 == ~doorState~0); 171279#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 171263#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 171260#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 171258#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 171241#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 171228#L1217-26 assume !(0 == ~currentFloorID~0); 168634#L1223-26 assume !(~currentFloorID~0 > 0); 168635#L1238-26 assume ~currentFloorID~0 > 0; 170545#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171023#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162316#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 178618#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 178617#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164460#L1463-12 assume !(1 == ~currentHeading~0); 162480#L1473-36 assume !(0 == ~currentFloorID~0); 162481#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162453#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 178633#L2963-4 assume !(-1 == ~expectedDirection~0); 178628#L2975-4 assume !(1 == ~expectedDirection~0); 178626#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 178624#L188-2 [2019-11-15 23:30:19,822 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:19,823 INFO L82 PathProgramCache]: Analyzing trace with hash -1283546667, now seen corresponding path program 1 times [2019-11-15 23:30:19,823 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:19,824 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1934426337] [2019-11-15 23:30:19,824 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:19,824 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:19,824 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:19,863 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:19,933 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:19,933 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1934426337] [2019-11-15 23:30:19,934 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:19,934 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:19,934 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1316646140] [2019-11-15 23:30:19,935 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:19,935 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:19,935 INFO L82 PathProgramCache]: Analyzing trace with hash 605476013, now seen corresponding path program 1 times [2019-11-15 23:30:19,935 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:19,936 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1620078444] [2019-11-15 23:30:19,936 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:19,936 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:19,936 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:19,950 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:19,975 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:19,975 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1620078444] [2019-11-15 23:30:19,975 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:19,976 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-15 23:30:19,976 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1477105205] [2019-11-15 23:30:19,976 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:19,976 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:19,976 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-15 23:30:19,977 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-15 23:30:19,977 INFO L87 Difference]: Start difference. First operand 17507 states and 32458 transitions. cyclomatic complexity: 14952 Second operand 5 states. [2019-11-15 23:30:26,189 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:26,189 INFO L93 Difference]: Finished difference Result 50416 states and 92763 transitions. [2019-11-15 23:30:26,190 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-15 23:30:26,190 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50416 states and 92763 transitions. [2019-11-15 23:30:26,391 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12903 [2019-11-15 23:30:26,525 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50416 states to 50350 states and 92691 transitions. [2019-11-15 23:30:26,525 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50350 [2019-11-15 23:30:26,567 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50350 [2019-11-15 23:30:26,567 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50350 states and 92691 transitions. [2019-11-15 23:30:26,611 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:26,611 INFO L688 BuchiCegarLoop]: Abstraction has 50350 states and 92691 transitions. [2019-11-15 23:30:26,660 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50350 states and 92691 transitions. [2019-11-15 23:30:27,495 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50350 to 26326. [2019-11-15 23:30:27,495 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26326 states. [2019-11-15 23:30:27,561 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26326 states to 26326 states and 48334 transitions. [2019-11-15 23:30:27,561 INFO L711 BuchiCegarLoop]: Abstraction has 26326 states and 48334 transitions. [2019-11-15 23:30:27,562 INFO L591 BuchiCegarLoop]: Abstraction has 26326 states and 48334 transitions. [2019-11-15 23:30:27,562 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-11-15 23:30:27,562 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26326 states and 48334 transitions. [2019-11-15 23:30:27,659 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6615 [2019-11-15 23:30:27,659 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:27,659 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:27,665 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:27,665 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:27,665 INFO L791 eck$LassoCheckResult]: Stem: 234076#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 234077#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 232011#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 232012#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 232545#L385 assume 0 != main_~tmp~8; 238477#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 235305#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 235163#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 233384#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 235032#L2485 assume 0 == initPersonOnFloor_~floor; 238188#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 230776#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 234620#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236399#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 237782#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 237783#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 239006#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 239026#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 236096#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 236097#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 238149#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 230731#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 233097#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 233098#L2214 assume !(0 == isFloorCalling_~floorID); 235715#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 232988#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 234594#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 235245#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234616#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234617#L1675 assume !(0 != timeShift_~tmp___9~2); 235357#L1766 assume !(1 == ~doorState~0); 238526#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238212#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232100#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232101#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236763#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 235968#L1217-2 assume !(0 == ~currentFloorID~0); 235969#L1223-2 assume !(~currentFloorID~0 > 0); 236490#L1238-2 assume ~currentFloorID~0 > 0; 238651#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239163#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230570#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 240272#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 240271#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 232468#L1463 assume !(1 == ~currentHeading~0); 230822#L1473 assume !(0 == ~currentFloorID~0); 230823#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230557#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 239269#L2963 assume !(-1 == ~expectedDirection~0); 239266#L2975 assume !(1 == ~expectedDirection~0); 239264#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 239263#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 239261#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 239258#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 239259#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239262#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238715#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 238716#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 244486#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 244485#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 244484#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 236019#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 236020#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 236358#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234618#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234619#L1675-1 assume !(0 != timeShift_~tmp___9~2); 235362#L1766-3 assume !(1 == ~doorState~0); 238525#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238217#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232105#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232106#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236771#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 236811#L1217-8 assume !(0 == ~currentFloorID~0); 236712#L1223-8 assume !(~currentFloorID~0 > 0); 236713#L1238-8 assume ~currentFloorID~0 > 0; 238631#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239159#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230635#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 256246#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 256247#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 232438#L1463-3 assume !(1 == ~currentHeading~0); 230560#L1473-9 assume !(0 == ~currentFloorID~0); 230561#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230533#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 240496#L2963-1 assume !(-1 == ~expectedDirection~0); 240493#L2975-1 assume !(1 == ~expectedDirection~0); 240491#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240490#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 240489#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 240488#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 240270#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 231378#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240435#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 240420#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 240411#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 240406#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240401#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 240398#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 240392#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240394#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 241976#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 241970#L1675-2 assume !(0 != timeShift_~tmp___9~2); 235336#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 238537#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238221#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232110#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232111#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236779#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 239274#L1217-14 assume !(0 == ~currentFloorID~0); 236663#L1223-14 assume !(~currentFloorID~0 > 0); 236665#L1238-14 assume ~currentFloorID~0 > 0; 238622#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239154#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230492#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 237179#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 239106#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256383#L1463-6 assume !(1 == ~currentHeading~0); 230552#L1473-18 assume !(0 == ~currentFloorID~0); 230517#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230496#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 240560#L2963-2 assume !(-1 == ~expectedDirection~0); 240557#L2975-2 assume !(1 == ~expectedDirection~0); 240555#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 240554#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 240547#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 240546#L2485-1 assume 0 == initPersonOnFloor_~floor; 240529#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 240512#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 240509#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 240506#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240505#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 240504#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 240502#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 240503#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239353#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240440#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 240428#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 240416#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 240409#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240405#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 240400#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 240396#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238836#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234602#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234603#L1675-3 assume !(0 != timeShift_~tmp___9~2); 235340#L1766-9 assume !(1 == ~doorState~0); 250515#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 250508#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 250500#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 250494#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 249161#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 239272#L1217-20 assume !(0 == ~currentFloorID~0); 236648#L1223-20 assume !(~currentFloorID~0 > 0); 236649#L1238-20 assume ~currentFloorID~0 > 0; 238615#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239175#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230605#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 250633#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 250634#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256125#L1463-9 assume !(1 == ~currentHeading~0); 230505#L1473-27 assume !(0 == ~currentFloorID~0); 230462#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230422#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 248969#L2963-3 assume !(-1 == ~expectedDirection~0); 248962#L2975-3 assume !(1 == ~expectedDirection~0); 248960#L2976-3 cleanup_~i~0 := 0; 248959#L188-2 [2019-11-15 23:30:27,667 INFO L793 eck$LassoCheckResult]: Loop: 248959#L188-2 assume !false; 248958#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 248957#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 248956#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 248955#L196 assume 1 != cleanup_~tmp___0~0; 248954#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 248951#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 248932#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 248927#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 248913#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 248912#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 248911#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 248910#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 248909#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 248907#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 246202#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239349#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238824#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 238825#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 248881#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 248879#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 237787#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 237788#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 248877#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238818#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234604#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234605#L1675-4 assume !(0 != timeShift_~tmp___9~2); 235344#L1766-12 assume !(1 == ~doorState~0); 238672#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238209#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232095#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232096#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236748#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 236749#L1217-26 assume !(0 == ~currentFloorID~0); 236633#L1223-26 assume !(~currentFloorID~0 > 0); 236634#L1238-26 assume ~currentFloorID~0 > 0; 238610#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239170#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230258#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 237175#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 256089#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256088#L1463-12 assume !(1 == ~currentHeading~0); 230424#L1473-36 assume !(0 == ~currentFloorID~0); 230425#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230396#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 248971#L2963-4 assume !(-1 == ~expectedDirection~0); 248966#L2975-4 assume !(1 == ~expectedDirection~0); 248961#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 248959#L188-2 [2019-11-15 23:30:27,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:27,668 INFO L82 PathProgramCache]: Analyzing trace with hash -1283546667, now seen corresponding path program 2 times [2019-11-15 23:30:27,668 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:27,668 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [340634083] [2019-11-15 23:30:27,669 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:27,669 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:27,669 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:27,695 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:27,755 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:27,756 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [340634083] [2019-11-15 23:30:27,756 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:27,756 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:27,756 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [323648362] [2019-11-15 23:30:27,757 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:27,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:27,758 INFO L82 PathProgramCache]: Analyzing trace with hash 820928471, now seen corresponding path program 1 times [2019-11-15 23:30:27,758 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:27,758 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [994042738] [2019-11-15 23:30:27,758 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:27,759 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:27,759 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:27,768 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:27,781 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:27,781 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [994042738] [2019-11-15 23:30:27,781 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:27,782 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 23:30:27,782 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [591715634] [2019-11-15 23:30:27,782 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:27,782 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:27,783 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-15 23:30:27,783 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-15 23:30:27,783 INFO L87 Difference]: Start difference. First operand 26326 states and 48334 transitions. cyclomatic complexity: 22009 Second operand 3 states. [2019-11-15 23:30:30,839 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:30,839 INFO L93 Difference]: Finished difference Result 46364 states and 84738 transitions. [2019-11-15 23:30:30,840 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-15 23:30:30,840 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46364 states and 84738 transitions. [2019-11-15 23:30:31,016 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11944 [2019-11-15 23:30:31,131 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46364 states to 46364 states and 84738 transitions. [2019-11-15 23:30:31,131 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46364 [2019-11-15 23:30:31,163 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46364 [2019-11-15 23:30:31,163 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46364 states and 84738 transitions. [2019-11-15 23:30:31,198 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:31,198 INFO L688 BuchiCegarLoop]: Abstraction has 46364 states and 84738 transitions. [2019-11-15 23:30:31,231 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46364 states and 84738 transitions. [2019-11-15 23:30:31,612 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46364 to 46206. [2019-11-15 23:30:31,613 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46206 states. [2019-11-15 23:30:31,713 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46206 states to 46206 states and 84580 transitions. [2019-11-15 23:30:31,713 INFO L711 BuchiCegarLoop]: Abstraction has 46206 states and 84580 transitions. [2019-11-15 23:30:31,713 INFO L591 BuchiCegarLoop]: Abstraction has 46206 states and 84580 transitions. [2019-11-15 23:30:31,714 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-11-15 23:30:31,714 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46206 states and 84580 transitions. [2019-11-15 23:30:31,826 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11900 [2019-11-15 23:30:31,826 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:31,827 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:31,833 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:31,834 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:31,834 INFO L791 eck$LassoCheckResult]: Stem: 306896#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 306897#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 304831#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 304832#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 305370#L385 assume 0 != main_~tmp~8; 311481#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 308180#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 308026#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 306210#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 307922#L2485 assume 0 == initPersonOnFloor_~floor; 311139#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 303487#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 307472#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 309334#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 310712#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 310713#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 311964#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 311981#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 309027#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 309028#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 311091#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 303440#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 305927#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 305928#L2214 assume !(0 == isFloorCalling_~floorID); 308598#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 305821#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 307446#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 308120#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 307468#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 307469#L1675 assume !(0 != timeShift_~tmp___9~2); 308236#L1766 assume !(1 == ~doorState~0); 311532#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 311168#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 304921#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 304922#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 309674#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 308898#L1217-2 assume !(0 == ~currentFloorID~0); 308899#L1223-2 assume ~currentFloorID~0 > 0; 309637#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 308607#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 306462#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 309423#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303352#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 320353#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 320351#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 320348#L1463 assume !(1 == ~currentHeading~0); 320309#L1473 assume !(0 == ~currentFloorID~0); 320303#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303260#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 320300#L2963 assume !(-1 == ~expectedDirection~0); 320267#L2975 assume !(1 == ~expectedDirection~0); 320263#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 320261#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 320259#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 320256#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 320251#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 320252#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 320270#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 320226#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 320217#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 320216#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 320214#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 320199#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 320187#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 320176#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 320175#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 320174#L1675-1 assume !(0 != timeShift_~tmp___9~2); 318594#L1766-3 assume !(1 == ~doorState~0); 338592#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 325760#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 325754#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 325751#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 309754#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 309755#L1217-8 assume !(0 == ~currentFloorID~0); 312249#L1223-8 assume ~currentFloorID~0 > 0; 309774#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 308518#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 306157#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 310400#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303216#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 325779#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 325528#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 305263#L1463-3 assume !(1 == ~currentHeading~0); 303263#L1473-9 assume !(0 == ~currentFloorID~0); 303264#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303236#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 324617#L2963-1 assume !(-1 == ~expectedDirection~0); 324613#L2975-1 assume !(1 == ~expectedDirection~0); 324610#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 324609#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 324605#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 324603#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 324602#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 317697#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 324593#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 324582#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 324578#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 324577#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 324576#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 324574#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 324569#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 324552#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 324549#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 324547#L1675-2 assume !(0 != timeShift_~tmp___9~2); 317640#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 324546#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 324543#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 324539#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 324536#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 324534#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 312227#L1217-14 assume !(0 == ~currentFloorID~0); 312226#L1223-14 assume ~currentFloorID~0 > 0; 309759#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 308557#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 306525#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 310346#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303330#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 324213#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 324211#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 324209#L1463-6 assume !(1 == ~currentHeading~0); 324207#L1473-18 assume !(0 == ~currentFloorID~0); 324196#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303198#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 324194#L2963-2 assume !(-1 == ~expectedDirection~0); 324191#L2975-2 assume !(1 == ~expectedDirection~0); 324189#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 324188#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 324176#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 324174#L2485-1 assume 0 == initPersonOnFloor_~floor; 324153#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 324136#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 324124#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 324108#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 324107#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 323422#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 323320#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 323321#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 314584#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 309246#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 334454#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 303594#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 307789#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 338649#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 308849#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 308850#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 314198#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 314196#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 313657#L1675-3 assume !(0 != timeShift_~tmp___9~2); 313656#L1766-9 assume !(1 == ~doorState~0); 313655#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 312979#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 312975#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 312973#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 312971#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 312203#L1217-20 assume !(0 == ~currentFloorID~0); 312201#L1223-20 assume ~currentFloorID~0 > 0; 309701#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 309702#L1238-20 assume ~currentFloorID~0 > 0; 312172#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 312164#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303308#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 325702#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 325700#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 325696#L1463-9 assume !(1 == ~currentHeading~0); 325693#L1473-27 assume !(0 == ~currentFloorID~0); 325651#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303121#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 337595#L2963-3 assume !(-1 == ~expectedDirection~0); 337591#L2975-3 assume !(1 == ~expectedDirection~0); 337583#L2976-3 cleanup_~i~0 := 0; 337582#L188-2 [2019-11-15 23:30:31,836 INFO L793 eck$LassoCheckResult]: Loop: 337582#L188-2 assume !false; 337581#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 337580#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 337579#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 337578#L196 assume 1 != cleanup_~tmp___0~0; 337577#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 337574#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 337571#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 337570#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 337556#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 337555#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 337554#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 337553#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 337552#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 337551#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 313942#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 313943#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 337544#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 334511#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 334506#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 334503#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 334502#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 334501#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 334498#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 334500#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 338038#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 338037#L1675-4 assume !(0 != timeShift_~tmp___9~2); 331858#L1766-12 assume !(1 == ~doorState~0); 325614#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 325615#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 331662#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 331660#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 331661#L1048-26 assume 1 == stopRequestedInDirection__wrappee__weight_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~22;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~22;isTopFloor_~retValue_acc~22 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~22; 338581#L2788-38 stopRequestedInDirection__wrappee__weight_#t~ret28 := isTopFloor_#res;stopRequestedInDirection__wrappee__weight_~tmp~15 := stopRequestedInDirection__wrappee__weight_#t~ret28;havoc stopRequestedInDirection__wrappee__weight_#t~ret28; 338566#L1052-26 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~15); 338562#L1058-26 assume !(~currentFloorID~0 < 0); 338557#L1073-26 assume ~currentFloorID~0 < 0; 311160#L1075-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 311056#L1076-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 311057#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 328227#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 328225#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 328221#L1463-12 assume !(1 == ~currentHeading~0); 328219#L1473-36 assume !(0 == ~currentFloorID~0); 303140#L1473-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 303094#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 337588#L2963-4 assume !(-1 == ~expectedDirection~0); 337586#L2975-4 assume !(1 == ~expectedDirection~0); 337584#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 337582#L188-2 [2019-11-15 23:30:31,837 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:31,837 INFO L82 PathProgramCache]: Analyzing trace with hash 1272670873, now seen corresponding path program 1 times [2019-11-15 23:30:31,838 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:31,838 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1688116663] [2019-11-15 23:30:31,838 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:31,838 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:31,838 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:31,865 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:31,929 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:31,930 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1688116663] [2019-11-15 23:30:31,930 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:31,930 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:31,931 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324146165] [2019-11-15 23:30:31,931 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:31,932 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:31,932 INFO L82 PathProgramCache]: Analyzing trace with hash -1837052519, now seen corresponding path program 1 times [2019-11-15 23:30:31,932 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:31,932 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [345728745] [2019-11-15 23:30:31,932 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:31,933 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:31,933 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:31,945 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:32,000 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:32,000 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [345728745] [2019-11-15 23:30:32,000 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:32,001 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-15 23:30:32,001 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1287792100] [2019-11-15 23:30:32,001 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:32,001 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:32,002 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-15 23:30:32,002 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-15 23:30:32,002 INFO L87 Difference]: Start difference. First operand 46206 states and 84580 transitions. cyclomatic complexity: 38375 Second operand 7 states. [2019-11-15 23:30:34,561 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:34,561 INFO L93 Difference]: Finished difference Result 135486 states and 251159 transitions. [2019-11-15 23:30:34,561 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-11-15 23:30:34,562 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 135486 states and 251159 transitions. [2019-11-15 23:30:40,220 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 36371 [2019-11-15 23:30:40,557 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 135486 states to 135342 states and 250919 transitions. [2019-11-15 23:30:40,558 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 135342 [2019-11-15 23:30:40,653 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 135342 [2019-11-15 23:30:40,653 INFO L73 IsDeterministic]: Start isDeterministic. Operand 135342 states and 250919 transitions. [2019-11-15 23:30:40,720 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:40,721 INFO L688 BuchiCegarLoop]: Abstraction has 135342 states and 250919 transitions. [2019-11-15 23:30:40,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135342 states and 250919 transitions. [2019-11-15 23:30:41,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135342 to 59451. [2019-11-15 23:30:41,476 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 59451 states. [2019-11-15 23:30:41,597 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59451 states to 59451 states and 108912 transitions. [2019-11-15 23:30:41,597 INFO L711 BuchiCegarLoop]: Abstraction has 59451 states and 108912 transitions. [2019-11-15 23:30:41,597 INFO L591 BuchiCegarLoop]: Abstraction has 59451 states and 108912 transitions. [2019-11-15 23:30:41,598 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-11-15 23:30:41,598 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 59451 states and 108912 transitions. [2019-11-15 23:30:41,750 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15365 [2019-11-15 23:30:41,750 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:41,750 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:41,754 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:41,755 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:41,755 INFO L791 eck$LassoCheckResult]: Stem: 488735#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 488736#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 486684#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 486685#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 487248#L385 assume 0 != main_~tmp~8; 493939#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 490169#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 490021#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 488083#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 489886#L2485 assume 0 == initPersonOnFloor_~floor; 493480#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 485253#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 489395#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 491394#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 493026#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 493027#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 494494#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 485895#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 485896#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 491070#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 485837#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 485838#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 487800#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 487801#L2214 assume !(0 == isFloorCalling_~floorID); 490630#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 487697#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 489371#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 490115#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 489391#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 489392#L1675 assume !(0 != timeShift_~tmp___9~2); 490235#L1766 assume !(1 == ~doorState~0); 493992#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 493515#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 486775#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 486776#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 491722#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 490970#L1217-2 assume !(0 == ~currentFloorID~0); 490971#L1223-2 assume ~currentFloorID~0 > 0; 491678#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 490644#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 488330#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 491469#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 485081#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 494799#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 494795#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487155#L1463 assume !(1 == ~currentHeading~0); 485302#L1473 assume !(0 == ~currentFloorID~0); 485303#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484581#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484582#L2963 assume !(-1 == ~expectedDirection~0); 491129#L2975 assume !(1 == ~expectedDirection~0); 491130#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 510960#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 510957#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 510955#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 495117#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 491034#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 491035#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 485846#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 485847#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 522305#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 522306#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 522313#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 522296#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 522289#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 522288#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 522271#L1675-1 assume !(0 != timeShift_~tmp___9~2); 490241#L1766-3 assume !(1 == ~doorState~0); 501650#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 501651#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 501463#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 501464#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 511018#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 494973#L1217-8 assume !(0 == ~currentFloorID~0); 494971#L1223-8 assume ~currentFloorID~0 > 0; 491837#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 491838#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 492662#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 492663#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 496609#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 496606#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 496604#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487125#L1463-3 assume !(1 == ~currentHeading~0); 484989#L1473-9 assume !(0 == ~currentFloorID~0); 484990#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484564#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484565#L2963-1 assume !(-1 == ~expectedDirection~0); 491090#L2975-1 assume !(1 == ~expectedDirection~0); 491092#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 520846#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 520845#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 520844#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501432#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 520325#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 520480#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 520478#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 520479#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 532581#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 532580#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 532575#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 532573#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 532565#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 532564#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 532562#L1675-2 assume !(0 != timeShift_~tmp___9~2); 520430#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 532549#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 532547#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 532543#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 532541#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 532542#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 494967#L1217-14 assume !(0 == ~currentFloorID~0); 494966#L1223-14 assume ~currentFloorID~0 > 0; 491824#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 490589#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 488390#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 492589#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 512437#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 512434#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 512432#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487136#L1463-6 assume !(1 == ~currentHeading~0); 484982#L1473-18 assume !(0 == ~currentFloorID~0); 484947#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484550#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484551#L2963-2 assume !(-1 == ~expectedDirection~0); 491097#L2975-2 assume !(1 == ~expectedDirection~0); 490937#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 490024#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 488090#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 489873#L2485-1 assume 0 == initPersonOnFloor_~floor; 493396#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 485236#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 489374#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 491356#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 519124#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 519123#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 519122#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501354#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 516380#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 519116#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 519112#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 519111#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 519109#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 519104#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 519102#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 519098#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 519094#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 519092#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 519091#L1675-3 assume !(0 != timeShift_~tmp___9~2); 516331#L1766-9 assume !(1 == ~doorState~0); 537794#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 501894#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 501892#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 501690#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 501691#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 495058#L1217-20 assume !(0 == ~currentFloorID~0); 494940#L1223-20 assume ~currentFloorID~0 > 0; 491758#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 491759#L1238-20 assume ~currentFloorID~0 > 0; 494762#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 494764#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 510740#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 510738#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 510736#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487110#L1463-9 assume !(1 == ~currentHeading~0); 484935#L1473-27 assume !(0 == ~currentFloorID~0); 484895#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484533#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484534#L2963-3 assume !(-1 == ~expectedDirection~0); 491109#L2975-3 assume !(1 == ~expectedDirection~0); 490944#L2976-3 cleanup_~i~0 := 0; 490945#L188-2 [2019-11-15 23:30:41,757 INFO L793 eck$LassoCheckResult]: Loop: 490945#L188-2 assume !false; 494576#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 494567#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 491958#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 491959#L196 assume 1 != cleanup_~tmp___0~0; 493407#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 488682#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 487758#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 484688#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 484689#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 492340#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 492826#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 515266#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 515263#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 515260#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 507460#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 515197#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 515192#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 515188#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 515187#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 515185#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 515184#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 515183#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 515181#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 515173#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 515164#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 511561#L1675-4 assume !(0 != timeShift_~tmp___9~2); 511560#L1766-12 assume !(1 == ~doorState~0); 511516#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 511501#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 511497#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 501315#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 501317#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 495064#L1217-26 assume !(0 == ~currentFloorID~0); 494934#L1223-26 assume ~currentFloorID~0 > 0; 491727#L1224-26 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 491729#L1238-26 assume ~currentFloorID~0 > 0; 494858#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 494722#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 484692#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 540406#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 540404#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487116#L1463-12 assume !(1 == ~currentHeading~0); 484857#L1473-36 assume !(0 == ~currentFloorID~0); 484858#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484516#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484517#L2963-4 assume !(-1 == ~expectedDirection~0); 491104#L2975-4 assume !(1 == ~expectedDirection~0); 490952#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 490945#L188-2 [2019-11-15 23:30:41,759 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:41,760 INFO L82 PathProgramCache]: Analyzing trace with hash -2789324, now seen corresponding path program 1 times [2019-11-15 23:30:41,760 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:41,760 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [949519541] [2019-11-15 23:30:41,760 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:41,761 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:41,761 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:41,786 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:41,841 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:41,841 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [949519541] [2019-11-15 23:30:41,842 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:41,842 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:41,842 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [296214950] [2019-11-15 23:30:41,843 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:41,843 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:41,843 INFO L82 PathProgramCache]: Analyzing trace with hash -1150099062, now seen corresponding path program 1 times [2019-11-15 23:30:41,843 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:41,843 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2131611156] [2019-11-15 23:30:41,844 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:41,844 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:41,844 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:41,853 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:41,878 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:41,878 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2131611156] [2019-11-15 23:30:41,878 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:41,878 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-15 23:30:41,878 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1553615358] [2019-11-15 23:30:41,879 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:41,879 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:41,879 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-15 23:30:41,879 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-15 23:30:41,880 INFO L87 Difference]: Start difference. First operand 59451 states and 108912 transitions. cyclomatic complexity: 49463 Second operand 5 states. [2019-11-15 23:30:45,481 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:45,481 INFO L93 Difference]: Finished difference Result 193396 states and 355913 transitions. [2019-11-15 23:30:45,482 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-15 23:30:45,482 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 193396 states and 355913 transitions. [2019-11-15 23:30:46,220 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 53085 [2019-11-15 23:30:47,935 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 193396 states to 193396 states and 355913 transitions. [2019-11-15 23:30:47,935 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 193396 [2019-11-15 23:30:48,034 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 193396 [2019-11-15 23:30:48,035 INFO L73 IsDeterministic]: Start isDeterministic. Operand 193396 states and 355913 transitions. [2019-11-15 23:30:48,111 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:48,111 INFO L688 BuchiCegarLoop]: Abstraction has 193396 states and 355913 transitions. [2019-11-15 23:30:48,197 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193396 states and 355913 transitions. [2019-11-15 23:30:48,955 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193396 to 60591. [2019-11-15 23:30:48,955 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60591 states. [2019-11-15 23:30:49,079 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60591 states to 60591 states and 110121 transitions. [2019-11-15 23:30:49,079 INFO L711 BuchiCegarLoop]: Abstraction has 60591 states and 110121 transitions. [2019-11-15 23:30:49,079 INFO L591 BuchiCegarLoop]: Abstraction has 60591 states and 110121 transitions. [2019-11-15 23:30:49,079 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-11-15 23:30:49,080 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60591 states and 110121 transitions. [2019-11-15 23:30:49,230 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15640 [2019-11-15 23:30:49,230 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:49,230 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:49,234 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:49,234 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:49,235 INFO L791 eck$LassoCheckResult]: Stem: 741535#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 741536#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 739485#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 739486#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 740058#L385 assume 0 != main_~tmp~8; 746633#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 742914#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 742766#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 740890#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 742637#L2485 assume 0 == initPersonOnFloor_~floor; 746193#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 738129#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 742163#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 744148#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 745754#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 745755#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 747206#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 738750#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 738751#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 743826#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 738694#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 738695#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 740607#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 740608#L2214 assume !(0 == isFloorCalling_~floorID); 743370#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 740501#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 742139#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 742860#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 742159#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 742160#L1675 assume !(0 != timeShift_~tmp___9~2); 742967#L1766 assume !(1 == ~doorState~0); 746684#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 746226#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 739575#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 739576#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744477#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 743725#L1217-2 assume !(0 == ~currentFloorID~0); 743726#L1223-2 assume ~currentFloorID~0 > 0; 744432#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 743389#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 741137#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 744223#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 737963#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 747913#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 747912#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 739958#L1463 assume !(1 == ~currentHeading~0); 738178#L1473 assume !(0 == ~currentFloorID~0); 738179#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 738186#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 766373#L2963 assume !(-1 == ~expectedDirection~0); 766367#L2975 assume !(1 == ~expectedDirection~0); 766364#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 766362#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 766360#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 766358#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 748022#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 743790#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 743791#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 746870#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 742493#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 742494#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 775330#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 775329#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 775326#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 775327#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 787554#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 787552#L1675-1 assume !(0 != timeShift_~tmp___9~2); 742971#L1766-3 assume !(1 == ~doorState~0); 746683#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 764433#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 764415#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 764416#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744558#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 744559#L1217-8 assume !(0 == ~currentFloorID~0); 747751#L1223-8 assume ~currentFloorID~0 > 0; 747752#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 743284#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 740838#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 747167#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 737948#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 766445#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 766446#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 739929#L1463-3 assume !(1 == ~currentHeading~0); 737872#L1473-9 assume !(0 == ~currentFloorID~0); 737873#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 778854#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 778852#L2963-1 assume !(-1 == ~expectedDirection~0); 778849#L2975-1 assume !(1 == ~expectedDirection~0); 778845#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 778746#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 778735#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 778734#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 750772#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 783456#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 783452#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 783448#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 783447#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 783445#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 783446#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 783857#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 783855#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 783434#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 783433#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 783427#L1675-2 assume !(0 != timeShift_~tmp___9~2); 742947#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 746696#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 746245#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 739585#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 739586#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 761762#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 747905#L1217-14 assume !(0 == ~currentFloorID~0); 747745#L1223-14 assume ~currentFloorID~0 > 0; 744563#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 744564#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 767357#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 747146#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 737933#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 770297#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 770294#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 767088#L1463-6 assume !(1 == ~currentHeading~0); 767089#L1473-18 assume !(0 == ~currentFloorID~0); 737826#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737804#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 783802#L2963-2 assume !(-1 == ~expectedDirection~0); 783799#L2975-2 assume !(1 == ~expectedDirection~0); 783797#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 783796#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 783790#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 783789#L2485-1 assume 0 == initPersonOnFloor_~floor; 778829#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 778744#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 778745#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 779138#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 779136#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 779134#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 779132#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 750761#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 779129#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 779125#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 779122#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 778933#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 778881#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 778880#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 778879#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 778876#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 778877#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 796897#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 796896#L1675-3 assume !(0 != timeShift_~tmp___9~2); 742950#L1766-9 assume !(1 == ~doorState~0); 746843#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 765194#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 765192#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 744455#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744456#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 747715#L1217-20 assume !(0 == ~currentFloorID~0); 747713#L1223-20 assume ~currentFloorID~0 > 0; 744509#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 744510#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 745003#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 745004#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 770355#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 770352#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 770350#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 765180#L1463-9 assume !(1 == ~currentHeading~0); 762785#L1473-27 assume !(0 == ~currentFloorID~0); 737768#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737724#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 796548#L2963-3 assume !(-1 == ~expectedDirection~0); 796544#L2975-3 assume !(1 == ~expectedDirection~0); 796536#L2976-3 cleanup_~i~0 := 0; 796535#L188-2 [2019-11-15 23:30:49,236 INFO L793 eck$LassoCheckResult]: Loop: 796535#L188-2 assume !false; 796534#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 796533#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 796532#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 796531#L196 assume 1 != cleanup_~tmp___0~0; 796530#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 796418#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 796415#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 789294#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 789281#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 789269#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 789270#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 789249#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 789250#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 788166#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 757040#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 796216#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 796212#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 796209#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 796208#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 796206#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 796205#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 796204#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 796201#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 796203#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 797644#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 797638#L1675-4 assume !(0 != timeShift_~tmp___9~2); 742953#L1766-12 assume !(1 == ~doorState~0); 746848#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 787723#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 787720#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 744465#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744467#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 747833#L1217-26 assume !(0 == ~currentFloorID~0); 747701#L1223-26 assume ~currentFloorID~0 > 0; 744483#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 741388#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 741134#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 744806#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 770336#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 770332#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 770331#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 766450#L1463-12 assume !(1 == ~currentHeading~0); 766451#L1473-36 assume !(0 == ~currentFloorID~0); 737744#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737696#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 796541#L2963-4 assume !(-1 == ~expectedDirection~0); 796539#L2975-4 assume !(1 == ~expectedDirection~0); 796537#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 796535#L188-2 [2019-11-15 23:30:49,237 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:49,237 INFO L82 PathProgramCache]: Analyzing trace with hash -1106561423, now seen corresponding path program 1 times [2019-11-15 23:30:49,237 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:49,238 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [406601476] [2019-11-15 23:30:49,238 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:49,238 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:49,238 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:49,281 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:49,335 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:49,335 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [406601476] [2019-11-15 23:30:49,335 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:49,336 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:49,336 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1620290951] [2019-11-15 23:30:49,336 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:49,337 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:49,337 INFO L82 PathProgramCache]: Analyzing trace with hash 2041096135, now seen corresponding path program 1 times [2019-11-15 23:30:49,337 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:49,337 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522052217] [2019-11-15 23:30:49,337 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:49,338 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:49,338 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:49,349 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:49,365 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:49,365 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522052217] [2019-11-15 23:30:49,366 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:49,366 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 23:30:49,366 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1324277256] [2019-11-15 23:30:49,366 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:49,366 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:49,366 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-15 23:30:49,367 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-15 23:30:49,367 INFO L87 Difference]: Start difference. First operand 60591 states and 110121 transitions. cyclomatic complexity: 49532 Second operand 3 states. [2019-11-15 23:30:49,825 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:49,825 INFO L93 Difference]: Finished difference Result 83360 states and 151885 transitions. [2019-11-15 23:30:49,826 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-15 23:30:49,826 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 83360 states and 151885 transitions. [2019-11-15 23:30:50,132 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 21494 [2019-11-15 23:30:50,346 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 83360 states to 83360 states and 151885 transitions. [2019-11-15 23:30:50,347 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 83360 [2019-11-15 23:30:50,403 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 83360 [2019-11-15 23:30:50,403 INFO L73 IsDeterministic]: Start isDeterministic. Operand 83360 states and 151885 transitions. [2019-11-15 23:30:50,446 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:30:50,447 INFO L688 BuchiCegarLoop]: Abstraction has 83360 states and 151885 transitions. [2019-11-15 23:30:50,496 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83360 states and 151885 transitions. [2019-11-15 23:30:51,031 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83360 to 81726. [2019-11-15 23:30:51,032 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 81726 states. [2019-11-15 23:30:51,195 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81726 states to 81726 states and 149019 transitions. [2019-11-15 23:30:51,195 INFO L711 BuchiCegarLoop]: Abstraction has 81726 states and 149019 transitions. [2019-11-15 23:30:51,195 INFO L591 BuchiCegarLoop]: Abstraction has 81726 states and 149019 transitions. [2019-11-15 23:30:51,196 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-11-15 23:30:51,196 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81726 states and 149019 transitions. [2019-11-15 23:30:51,396 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 20694 [2019-11-15 23:30:51,396 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:30:51,396 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:30:51,401 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:51,401 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:30:51,401 INFO L791 eck$LassoCheckResult]: Stem: 885440#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 885441#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 883386#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 883387#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 883969#L385 assume 0 != main_~tmp~8; 890242#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 886747#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 886599#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 884803#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 886489#L2485 assume 0 == initPersonOnFloor_~floor; 889845#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 882065#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 886018#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 887902#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 889411#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 889412#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 890786#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 882683#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 882629#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 886890#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 885801#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 885172#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 886257#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 884516#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 884517#L2214 assume !(0 == isFloorCalling_~floorID); 891858#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 891852#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 886937#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 886693#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 886014#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 886015#L1675 assume !(0 != timeShift_~tmp___9~2); 886796#L1766 assume !(1 == ~doorState~0); 890290#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 889877#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 883476#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 883477#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 888234#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 887477#L1217-2 assume !(0 == ~currentFloorID~0); 887478#L1223-2 assume ~currentFloorID~0 > 0; 888192#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 891816#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 891811#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 891809#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 881906#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 892846#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 892783#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 892785#L1463 assume !(1 == ~currentHeading~0); 882114#L1473 assume !(0 == ~currentFloorID~0); 882115#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 903111#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 903112#L2963 assume !(-1 == ~expectedDirection~0); 903039#L2975 assume !(1 == ~expectedDirection~0); 887520#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 887521#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 889413#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 890777#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 890880#L2894-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902063#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902062#L2915-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902061#L2926-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902060#L2937-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902058#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902059#L1525-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 905924#L2214-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 905923#L2241-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 905915#L1496-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 905913#L1508-1 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 905911#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 905909#L1675-1 assume !(0 != timeShift_~tmp___9~2); 905908#L1766-3 assume !(1 == ~doorState~0); 905903#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 905878#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 905872#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 905867#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 905868#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 905992#L1217-8 assume !(0 == ~currentFloorID~0); 893926#L1223-8 assume ~currentFloorID~0 > 0; 888329#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 888330#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 893872#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 893845#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 893522#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 893515#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 893511#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 893512#L1463-3 assume !(1 == ~currentHeading~0); 892781#L1473-9 assume !(0 == ~currentFloorID~0); 883735#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 938786#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 938782#L2963-1 assume !(-1 == ~expectedDirection~0); 938783#L2975-1 assume !(1 == ~expectedDirection~0); 935056#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 935054#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 935052#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 935051#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 895303#L2894-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902925#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902923#L2915-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902922#L2926-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902920#L2937-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902918#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902919#L1525-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 902913#L2214-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902910#L2241-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 902904#L1496-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 902905#L1508-2 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 929045#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 929043#L1675-2 assume !(0 != timeShift_~tmp___9~2); 929042#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 929041#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 929039#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 929035#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 929033#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 929032#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 929031#L1217-14 assume !(0 == ~currentFloorID~0); 893921#L1223-14 assume ~currentFloorID~0 > 0; 888319#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 887122#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 885110#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 888964#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 912352#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 906559#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 895196#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 883847#L1463-6 assume !(1 == ~currentHeading~0); 883848#L1473-18 assume !(0 == ~currentFloorID~0); 883601#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 927336#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 935862#L2963-2 assume !(-1 == ~expectedDirection~0); 935860#L2975-2 assume !(1 == ~expectedDirection~0); 935856#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 935855#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 935849#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 935848#L2485-1 assume 0 == initPersonOnFloor_~floor; 935830#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 935813#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 935810#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 906226#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 906227#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 906207#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 906208#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 902947#L2894-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902946#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902945#L2915-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902944#L2926-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902943#L2937-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902942#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902939#L1525-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 902940#L2214-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902931#L2241-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 902932#L1496-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 906345#L1508-3 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 906340#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 906334#L1675-3 assume !(0 != timeShift_~tmp___9~2); 906328#L1766-9 assume !(1 == ~doorState~0); 906325#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 906316#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 906310#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 906305#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 906306#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 906405#L1217-20 assume !(0 == ~currentFloorID~0); 893803#L1223-20 assume ~currentFloorID~0 > 0; 893802#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 893779#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 893773#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 893774#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 893518#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 893517#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 893509#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 883822#L1463-9 assume !(1 == ~currentHeading~0); 881764#L1473-27 assume !(0 == ~currentFloorID~0); 881765#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 907166#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 950236#L2963-3 assume !(-1 == ~expectedDirection~0); 950238#L2975-3 assume !(1 == ~expectedDirection~0); 937676#L2976-3 cleanup_~i~0 := 0; 937672#L188-2 [2019-11-15 23:30:51,403 INFO L793 eck$LassoCheckResult]: Loop: 937672#L188-2 assume !false; 937667#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 937666#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 937665#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 937654#L196 assume 1 != cleanup_~tmp___0~0; 936641#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 936296#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 935807#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 932187#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 932173#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 932059#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 932008#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 932006#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 932004#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 932002#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 928555#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902898#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902899#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902894#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902892#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902893#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902887#L1525-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 902888#L2214-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902956#L2241-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 902950#L1496-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 902951#L1508-4 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 931398#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 931396#L1675-4 assume !(0 != timeShift_~tmp___9~2); 931395#L1766-12 assume !(1 == ~doorState~0); 931394#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 931391#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 931388#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 931386#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 931387#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 931380#L1217-26 assume !(0 == ~currentFloorID~0); 893169#L1223-26 assume ~currentFloorID~0 > 0; 893168#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 893137#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 893132#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 893133#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 892958#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 892956#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 892771#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 892773#L1463-12 assume !(1 == ~currentHeading~0); 892767#L1473-36 assume !(0 == ~currentFloorID~0); 883549#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 907962#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 937683#L2963-4 assume !(-1 == ~expectedDirection~0); 937684#L2975-4 assume !(1 == ~expectedDirection~0); 937677#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 937672#L188-2 [2019-11-15 23:30:51,403 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:51,404 INFO L82 PathProgramCache]: Analyzing trace with hash 1573303405, now seen corresponding path program 1 times [2019-11-15 23:30:51,404 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:51,404 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1725240751] [2019-11-15 23:30:51,404 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:51,404 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:51,404 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:51,428 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:51,487 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:51,487 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1725240751] [2019-11-15 23:30:51,488 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:51,488 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:30:51,488 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1790774770] [2019-11-15 23:30:51,489 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:30:51,489 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:30:51,490 INFO L82 PathProgramCache]: Analyzing trace with hash 1076256460, now seen corresponding path program 1 times [2019-11-15 23:30:51,490 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:30:51,490 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1951416516] [2019-11-15 23:30:51,490 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:51,490 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:30:51,490 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:30:51,502 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:30:51,540 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:30:51,541 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1951416516] [2019-11-15 23:30:51,541 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:30:51,541 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-15 23:30:51,541 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [174623241] [2019-11-15 23:30:51,542 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:30:51,542 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:30:51,542 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-15 23:30:51,542 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-15 23:30:51,542 INFO L87 Difference]: Start difference. First operand 81726 states and 149019 transitions. cyclomatic complexity: 67295 Second operand 7 states. [2019-11-15 23:30:52,668 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:30:52,668 INFO L93 Difference]: Finished difference Result 188092 states and 346575 transitions. [2019-11-15 23:30:52,668 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-11-15 23:30:52,669 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 188092 states and 346575 transitions. [2019-11-15 23:30:53,480 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 50663 [2019-11-15 23:31:00,242 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 188092 states to 188092 states and 346575 transitions. [2019-11-15 23:31:00,242 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 188092 [2019-11-15 23:31:00,352 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 188092 [2019-11-15 23:31:00,352 INFO L73 IsDeterministic]: Start isDeterministic. Operand 188092 states and 346575 transitions. [2019-11-15 23:31:00,432 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:31:00,432 INFO L688 BuchiCegarLoop]: Abstraction has 188092 states and 346575 transitions. [2019-11-15 23:31:00,520 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188092 states and 346575 transitions. [2019-11-15 23:31:01,308 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188092 to 80649. [2019-11-15 23:31:01,308 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80649 states. [2019-11-15 23:31:01,474 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80649 states to 80649 states and 147261 transitions. [2019-11-15 23:31:01,474 INFO L711 BuchiCegarLoop]: Abstraction has 80649 states and 147261 transitions. [2019-11-15 23:31:01,474 INFO L591 BuchiCegarLoop]: Abstraction has 80649 states and 147261 transitions. [2019-11-15 23:31:01,474 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-11-15 23:31:01,474 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 80649 states and 147261 transitions. [2019-11-15 23:31:01,673 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 20318 [2019-11-15 23:31:01,674 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:31:01,674 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:31:01,678 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:01,678 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:01,679 INFO L791 eck$LassoCheckResult]: Stem: 1155321#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 1155322#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1153256#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1153257#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1153839#L385 assume 0 != main_~tmp~8; 1160122#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1156626#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1156472#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1154683#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1156353#L2485 assume 0 == initPersonOnFloor_~floor; 1159747#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1151924#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1155899#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1157803#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1159322#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1159323#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1160647#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1152550#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1152498#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1156764#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1155687#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1155051#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1156142#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1161545#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1161543#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1161542#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1161541#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1161535#L869-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1161531#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1161530#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1161481#L1675 assume !(0 != timeShift_~tmp___9~2); 1161480#L1766 assume !(1 == ~doorState~0); 1161479#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1161477#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1161473#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1161471#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1161470#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1161469#L1217-2 assume !(0 == ~currentFloorID~0); 1161467#L1223-2 assume ~currentFloorID~0 > 0; 1161468#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1161465#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1161461#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1161459#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1161460#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1161396#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1161397#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1161956#L1463 assume !(1 == ~currentHeading~0); 1151970#L1473 assume !(0 == ~currentFloorID~0); 1151971#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1160963#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1169357#L2963 assume !(-1 == ~expectedDirection~0); 1169354#L2975 assume !(1 == ~expectedDirection~0); 1169351#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1169350#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1169349#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1169341#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1160947#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1169338#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1170419#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1170417#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1170418#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1175339#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1175338#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1175337#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1175335#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1175330#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1175323#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1175324#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1160173#L1766-3 assume !(1 == ~doorState~0); 1160174#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1159788#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1153349#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1153350#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1158146#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1170289#L1217-8 assume !(0 == ~currentFloorID~0); 1170287#L1223-8 assume ~currentFloorID~0 > 0; 1170286#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1170285#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1158932#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1158933#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1170101#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1170097#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1170091#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1153705#L1463-3 assume !(1 == ~currentHeading~0); 1151690#L1473-9 assume !(0 == ~currentFloorID~0); 1151691#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1151692#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1173854#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1172149#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1172145#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1172146#L2975-1 assume !(1 == ~expectedDirection~0); 1172094#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1172095#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1172069#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1172070#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1167972#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1171886#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1171878#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1171866#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1171864#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1171851#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1171852#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1171835#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1171832#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1171829#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1171821#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1171822#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1171403#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1171398#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1171348#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1171339#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1171336#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1171337#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1171357#L1217-14 assume !(0 == ~currentFloorID~0); 1171299#L1223-14 assume ~currentFloorID~0 > 0; 1171300#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1171374#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1171364#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1171354#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1171355#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1179326#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1179325#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1153715#L1463-6 assume !(1 == ~currentHeading~0); 1153716#L1473-18 assume !(0 == ~currentFloorID~0); 1204648#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1204644#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1204641#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1200822#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1200820#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1200812#L2975-2 assume !(1 == ~expectedDirection~0); 1200810#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1200809#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1200802#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1200801#L2485-1 assume 0 == initPersonOnFloor_~floor; 1200784#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1200767#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1200764#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1200760#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1200759#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1200758#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1200730#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1164426#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1194151#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1200890#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1200888#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1200635#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1200623#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1200624#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1200609#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1200463#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1200456#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1200455#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1179576#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1179575#L1766-9 assume !(1 == ~doorState~0); 1179574#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1179571#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1179568#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1179557#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1179407#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1162531#L1217-20 assume !(0 == ~currentFloorID~0); 1162529#L1223-20 assume ~currentFloorID~0 > 0; 1162528#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1162525#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1162510#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1162442#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1162407#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1162405#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1162401#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1153687#L1463-9 assume !(1 == ~currentHeading~0); 1151633#L1473-27 assume !(0 == ~currentFloorID~0); 1151587#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1151546#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1198546#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1191537#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1198545#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1191450#L2975-3 assume !(1 == ~expectedDirection~0); 1191432#L2976-3 cleanup_~i~0 := 0; 1191419#L188-2 [2019-11-15 23:31:01,680 INFO L793 eck$LassoCheckResult]: Loop: 1191419#L188-2 assume !false; 1191415#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1191409#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 1191277#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1191273#L196 assume 1 != cleanup_~tmp___0~0; 1191253#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1191249#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1191230#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 1191225#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 1191211#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 1191210#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1191209#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1191208#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1191207#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1191206#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1181799#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1188551#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1188552#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1188563#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1188556#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1188557#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1191271#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1191272#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1191279#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1191278#L865-58 assume !(1 == buttonForFloorIsPressed_~floorID); 1191274#L869-58 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1191254#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1191252#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1179451#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1179453#L1766-12 assume !(1 == ~doorState~0); 1179447#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1179448#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1190840#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1190834#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1190835#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1190823#L1217-26 assume !(0 == ~currentFloorID~0); 1178953#L1223-26 assume ~currentFloorID~0 > 0; 1178952#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1178949#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1178945#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1178946#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1178652#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1178649#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1178068#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1178070#L1463-12 assume !(1 == ~currentHeading~0); 1191547#L1473-36 assume !(0 == ~currentFloorID~0); 1153417#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1185346#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1191466#L2963-4 assume !(-1 == ~expectedDirection~0); 1191464#L2975-4 assume !(1 == ~expectedDirection~0); 1191433#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1191419#L188-2 [2019-11-15 23:31:01,681 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:01,681 INFO L82 PathProgramCache]: Analyzing trace with hash -2076185870, now seen corresponding path program 1 times [2019-11-15 23:31:01,681 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:01,682 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1347529550] [2019-11-15 23:31:01,682 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:01,682 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:01,682 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:01,707 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:01,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:01,770 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1347529550] [2019-11-15 23:31:01,770 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:01,770 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:31:01,770 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2078270478] [2019-11-15 23:31:01,771 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:31:01,771 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:01,771 INFO L82 PathProgramCache]: Analyzing trace with hash 1698784332, now seen corresponding path program 1 times [2019-11-15 23:31:01,772 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:01,772 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1476512315] [2019-11-15 23:31:01,772 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:01,772 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:01,773 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:01,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:01,866 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:01,866 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1476512315] [2019-11-15 23:31:01,866 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:01,867 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-11-15 23:31:01,867 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [202494240] [2019-11-15 23:31:01,867 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:31:01,867 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:31:01,867 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-11-15 23:31:01,868 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2019-11-15 23:31:01,868 INFO L87 Difference]: Start difference. First operand 80649 states and 147261 transitions. cyclomatic complexity: 66615 Second operand 8 states. [2019-11-15 23:31:11,720 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:31:11,720 INFO L93 Difference]: Finished difference Result 201600 states and 368958 transitions. [2019-11-15 23:31:11,721 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-11-15 23:31:11,721 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 201600 states and 368958 transitions. [2019-11-15 23:31:13,315 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 52947 [2019-11-15 23:31:13,894 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 201600 states to 201600 states and 368958 transitions. [2019-11-15 23:31:13,894 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 201600 [2019-11-15 23:31:14,017 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 201600 [2019-11-15 23:31:14,017 INFO L73 IsDeterministic]: Start isDeterministic. Operand 201600 states and 368958 transitions. [2019-11-15 23:31:14,112 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:31:14,112 INFO L688 BuchiCegarLoop]: Abstraction has 201600 states and 368958 transitions. [2019-11-15 23:31:14,215 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201600 states and 368958 transitions. [2019-11-15 23:31:15,210 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201600 to 103118. [2019-11-15 23:31:15,210 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103118 states. [2019-11-15 23:31:15,439 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103118 states to 103118 states and 189304 transitions. [2019-11-15 23:31:15,439 INFO L711 BuchiCegarLoop]: Abstraction has 103118 states and 189304 transitions. [2019-11-15 23:31:15,439 INFO L591 BuchiCegarLoop]: Abstraction has 103118 states and 189304 transitions. [2019-11-15 23:31:15,439 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-11-15 23:31:15,439 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 103118 states and 189304 transitions. [2019-11-15 23:31:15,721 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 26486 [2019-11-15 23:31:15,721 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:31:15,721 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:31:15,726 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:15,726 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:15,727 INFO L791 eck$LassoCheckResult]: Stem: 1437529#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 1437530#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1435481#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1435482#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1436053#L385 assume 0 != main_~tmp~8; 1442100#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1438785#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1438632#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1436896#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1438511#L2485 assume 0 == initPersonOnFloor_~floor; 1441783#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1434178#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1438081#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1439893#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1441363#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1441364#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1442673#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1434781#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1434733#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1438927#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1437878#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1437265#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1438310#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1443633#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1443385#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1443383#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1443381#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1443380#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1443379#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1443371#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1443369#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1443368#L1675 assume !(0 != timeShift_~tmp___9~2); 1443367#L1766 assume !(1 == ~doorState~0); 1443366#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1443364#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1443360#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1443354#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1443352#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1443350#L1217-2 assume !(0 == ~currentFloorID~0); 1443348#L1223-2 assume ~currentFloorID~0 > 0; 1440318#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1440319#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1443269#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1443266#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1443267#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1443640#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1443641#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1443824#L1463 assume !(1 == ~currentHeading~0); 1434224#L1473 assume !(0 == ~currentFloorID~0); 1434225#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1445487#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1482561#L2963 assume !(-1 == ~expectedDirection~0); 1482559#L2975 assume !(1 == ~expectedDirection~0); 1482556#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1482555#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1482554#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1482553#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1442932#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1482552#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1485211#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1485209#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1485210#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1490400#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1490399#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1490398#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1490396#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1490391#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1490287#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1490288#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1499077#L1766-3 assume !(1 == ~doorState~0); 1499076#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1499075#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1499070#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1499068#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1499067#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1499066#L1217-8 assume !(0 == ~currentFloorID~0); 1499065#L1223-8 assume ~currentFloorID~0 > 0; 1499062#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1499051#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1499031#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1499019#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1499006#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1499002#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1498997#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1496234#L1463-3 assume !(1 == ~currentHeading~0); 1433969#L1473-9 assume !(0 == ~currentFloorID~0); 1433970#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433941#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1528217#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1467233#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1523146#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1467211#L2975-1 assume !(1 == ~expectedDirection~0); 1467210#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1466076#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1466077#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1481802#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1457867#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1487838#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1487835#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1487832#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1487834#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1490300#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1490299#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1490298#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1490297#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1490291#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1490292#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1528416#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1528414#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1528413#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1528411#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1528406#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1528403#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1528404#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1535447#L1217-14 assume !(0 == ~currentFloorID~0); 1535444#L1223-14 assume ~currentFloorID~0 > 0; 1535435#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1535171#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1535167#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1528308#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1528305#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1528300#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1528299#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1435950#L1463-6 assume !(1 == ~currentHeading~0); 1433961#L1473-18 assume !(0 == ~currentFloorID~0); 1433924#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433925#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1496240#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1492402#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1496238#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1492398#L2975-2 assume !(1 == ~expectedDirection~0); 1492396#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1492395#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1492389#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1492388#L2485-1 assume 0 == initPersonOnFloor_~floor; 1492370#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1490564#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1490505#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1473460#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1473415#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1473381#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1473351#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1451246#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1473330#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1473327#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1473324#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1473325#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1490285#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1490284#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1490283#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1490282#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1490278#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1487785#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1487786#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1535385#L1766-9 assume !(1 == ~doorState~0); 1535384#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1535380#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1535347#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1535341#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1535342#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1535371#L1217-20 assume !(0 == ~currentFloorID~0); 1535364#L1223-20 assume ~currentFloorID~0 > 0; 1535362#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1535312#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1535308#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1535267#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1535196#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1535194#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1535193#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1435924#L1463-9 assume !(1 == ~currentHeading~0); 1433912#L1473-27 assume !(0 == ~currentFloorID~0); 1433872#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433832#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1515403#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1495269#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1515384#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1494295#L2975-3 assume !(1 == ~expectedDirection~0); 1494284#L2976-3 cleanup_~i~0 := 0; 1494275#L188-2 [2019-11-15 23:31:15,729 INFO L793 eck$LassoCheckResult]: Loop: 1494275#L188-2 assume !false; 1494271#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1494253#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 1494250#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1492346#L196 assume 1 != cleanup_~tmp___0~0; 1492339#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1492329#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1492323#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 1492321#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 1492307#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 1492306#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1473292#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1473234#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1473225#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1469992#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1451367#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1469912#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1469903#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1469896#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1469892#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1469887#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1469883#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1469880#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1469875#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1469877#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1474179#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1474156#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1469844#L1766-12 assume !(1 == ~doorState~0); 1469842#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1469838#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1469830#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1469827#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1469825#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1469823#L1217-26 assume !(0 == ~currentFloorID~0); 1469817#L1223-26 assume ~currentFloorID~0 > 0; 1469816#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1469813#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1469810#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1469807#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1433668#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1440698#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1442773#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1435930#L1463-12 assume !(1 == ~currentHeading~0); 1433834#L1473-36 assume !(0 == ~currentFloorID~0); 1433835#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433805#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1496270#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1496268#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1496237#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1495259#L2975-4 assume !(1 == ~expectedDirection~0); 1494285#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1494275#L188-2 [2019-11-15 23:31:15,730 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:15,730 INFO L82 PathProgramCache]: Analyzing trace with hash 1117751291, now seen corresponding path program 1 times [2019-11-15 23:31:15,730 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:15,731 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1743739001] [2019-11-15 23:31:15,731 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:15,731 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:15,731 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:15,754 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:15,823 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:15,824 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1743739001] [2019-11-15 23:31:15,824 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:15,824 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:31:15,825 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1090537037] [2019-11-15 23:31:15,825 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:31:15,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:15,826 INFO L82 PathProgramCache]: Analyzing trace with hash -1318191518, now seen corresponding path program 1 times [2019-11-15 23:31:15,826 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:15,826 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [984641181] [2019-11-15 23:31:15,826 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:15,826 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:15,826 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:15,848 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:15,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:15,990 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [984641181] [2019-11-15 23:31:15,990 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:15,990 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-15 23:31:15,990 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1435866799] [2019-11-15 23:31:15,990 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:31:15,993 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:31:15,996 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-15 23:31:15,996 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-15 23:31:15,996 INFO L87 Difference]: Start difference. First operand 103118 states and 189304 transitions. cyclomatic complexity: 86189 Second operand 5 states. [2019-11-15 23:31:18,245 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:31:18,245 INFO L93 Difference]: Finished difference Result 365320 states and 678906 transitions. [2019-11-15 23:31:18,245 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-11-15 23:31:18,246 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 365320 states and 678906 transitions. [2019-11-15 23:31:20,924 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 93155 [2019-11-15 23:31:21,877 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 365320 states to 365320 states and 678906 transitions. [2019-11-15 23:31:21,877 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 365320 [2019-11-15 23:31:22,084 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 365320 [2019-11-15 23:31:22,084 INFO L73 IsDeterministic]: Start isDeterministic. Operand 365320 states and 678906 transitions. [2019-11-15 23:31:22,245 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:31:22,246 INFO L688 BuchiCegarLoop]: Abstraction has 365320 states and 678906 transitions. [2019-11-15 23:31:22,432 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 365320 states and 678906 transitions. [2019-11-15 23:31:24,092 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 365320 to 148741. [2019-11-15 23:31:24,092 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 148741 states. [2019-11-15 23:31:24,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148741 states to 148741 states and 271014 transitions. [2019-11-15 23:31:24,415 INFO L711 BuchiCegarLoop]: Abstraction has 148741 states and 271014 transitions. [2019-11-15 23:31:24,415 INFO L591 BuchiCegarLoop]: Abstraction has 148741 states and 271014 transitions. [2019-11-15 23:31:24,415 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-11-15 23:31:24,415 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148741 states and 271014 transitions. [2019-11-15 23:31:24,798 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 38076 [2019-11-15 23:31:24,799 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:31:24,799 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:31:24,804 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:24,804 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:24,805 INFO L791 eck$LassoCheckResult]: Stem: 1906134#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 1906135#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1904056#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1904057#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1904644#L385 assume 0 != main_~tmp~8; 1911245#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1907483#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1907331#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1905485#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1907201#L2485 assume 0 == initPersonOnFloor_~floor; 1910814#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1902680#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1906736#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1908727#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1910368#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1910369#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1911812#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1903303#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1903248#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1907623#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1906511#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1905852#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1906977#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1913238#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1913237#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1913236#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1913235#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1913234#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1913233#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1913231#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1913230#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1913228#L1675 assume !(0 != timeShift_~tmp___9~2); 1913227#L1766 assume !(1 == ~doorState~0); 1913226#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1913224#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1913219#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1913218#L1401 assume 0 != stopRequestedInDirection_~overload~0; 1913216#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1913217#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1913387#L1217 assume !(0 == ~currentFloorID~0); 1913383#L1223 assume ~currentFloorID~0 > 0; 1913380#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1913375#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1913371#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1913263#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1913146#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1913143#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1913144#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1921731#L1463 assume !(1 == ~currentHeading~0); 1921724#L1473 assume !(0 == ~currentFloorID~0); 1921719#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1921716#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1921714#L2963 assume !(-1 == ~expectedDirection~0); 1921712#L2975 assume !(1 == ~expectedDirection~0); 1921708#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1921707#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1921706#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1921705#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1912465#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1921704#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1974248#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1974246#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1974247#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1975208#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1975209#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1975222#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1975220#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1975212#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1975210#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1975189#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1924211#L1766-3 assume !(1 == ~doorState~0); 1924108#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1924106#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1924100#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1924098#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 1924096#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1924094#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1924093#L1217-6 assume !(0 == ~currentFloorID~0); 1924091#L1223-6 assume ~currentFloorID~0 > 0; 1924090#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1923940#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1923931#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1923820#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1923712#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1923708#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1923693#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1923685#L1463-3 assume !(1 == ~currentHeading~0); 1923659#L1473-9 assume !(0 == ~currentFloorID~0); 1923656#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1923654#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1923652#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1923653#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1974884#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1974881#L2975-1 assume !(1 == ~expectedDirection~0); 1974879#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1974878#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1974877#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1974876#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1966924#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1974871#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1974868#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1974866#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1974865#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1974863#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1972560#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1974852#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1974848#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1974842#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1974840#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1974838#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1919042#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1919041#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1919030#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1919026#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1919025#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 1919023#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1919024#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1919394#L1217-12 assume !(0 == ~currentFloorID~0); 1919391#L1223-12 assume ~currentFloorID~0 > 0; 1919389#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1919365#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1919346#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1919336#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1919318#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1918931#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1918932#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1933807#L1463-6 assume !(1 == ~currentHeading~0); 1933804#L1473-18 assume !(0 == ~currentFloorID~0); 1933800#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1933799#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1933797#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1933798#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2015086#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2015083#L2975-2 assume !(1 == ~expectedDirection~0); 2015081#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2015080#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2015074#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2015073#L2485-1 assume 0 == initPersonOnFloor_~floor; 2015055#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2015038#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2015035#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2015032#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2015031#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2015030#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2015029#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2005499#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015024#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2015021#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2015019#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2015018#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2015017#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2009552#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015016#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2015014#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2014996#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2014993#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2014981#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1929604#L1766-9 assume !(1 == ~doorState~0); 1929080#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1928469#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1928464#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1928463#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 1927034#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1927035#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1927403#L1217-18 assume !(0 == ~currentFloorID~0); 1927402#L1223-18 assume ~currentFloorID~0 > 0; 1927400#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1927379#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1927359#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1927351#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1927335#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1927327#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1927328#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1939399#L1463-9 assume !(1 == ~currentHeading~0); 1939398#L1473-27 assume !(0 == ~currentFloorID~0); 1939396#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1926105#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1939393#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1939394#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2015697#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2015693#L2975-3 assume !(1 == ~expectedDirection~0); 2015684#L2976-3 cleanup_~i~0 := 0; 2015683#L188-2 [2019-11-15 23:31:24,807 INFO L793 eck$LassoCheckResult]: Loop: 2015683#L188-2 assume !false; 2015682#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2015681#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 2015680#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2015679#L196 assume 1 != cleanup_~tmp___0~0; 2015678#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2015658#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2015634#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 2015611#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 2015596#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 2015594#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2015592#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2015590#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2015588#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2015585#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2015582#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015579#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2015576#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2015574#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2015573#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2015571#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2014523#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015561#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2015556#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2015544#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2015538#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2015536#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1931024#L1766-12 assume !(1 == ~doorState~0); 1926783#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1926784#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1926773#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1926774#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 1926735#L1402-8 assume !(0 != stopRequestedInDirection_~buttonPressed~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1926737#L1048-25 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1926728#L1217-25 assume !(0 == ~currentFloorID~0); 1926729#L1223-25 assume ~currentFloorID~0 > 0; 1926872#L1224-25 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1926863#L2214-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1926852#L2241-265 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1926723#L1228-25 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1926725#L1370-25 stopRequestedInDirection_#t~ret41 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret41;havoc stopRequestedInDirection_#t~ret41;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1926929#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1926930#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1939392#L1463-12 assume !(1 == ~currentHeading~0); 1939390#L1473-36 assume !(0 == ~currentFloorID~0); 1939388#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1925983#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1939386#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1939387#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2015699#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2015689#L2975-4 assume !(1 == ~expectedDirection~0); 2015685#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2015683#L188-2 [2019-11-15 23:31:24,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:24,808 INFO L82 PathProgramCache]: Analyzing trace with hash -124285972, now seen corresponding path program 1 times [2019-11-15 23:31:24,808 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:24,808 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1834872033] [2019-11-15 23:31:24,808 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:24,809 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:24,809 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:24,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:24,895 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:24,896 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1834872033] [2019-11-15 23:31:24,896 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:24,896 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:31:24,897 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1815182833] [2019-11-15 23:31:24,899 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:31:24,899 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:24,900 INFO L82 PathProgramCache]: Analyzing trace with hash 1297388381, now seen corresponding path program 1 times [2019-11-15 23:31:24,900 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:24,900 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1805129913] [2019-11-15 23:31:24,900 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:24,900 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:24,901 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:24,910 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:24,932 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:24,933 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1805129913] [2019-11-15 23:31:24,933 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:24,933 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-15 23:31:24,933 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1755154105] [2019-11-15 23:31:24,934 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:31:24,934 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:31:24,934 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-15 23:31:24,934 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-15 23:31:24,934 INFO L87 Difference]: Start difference. First operand 148741 states and 271014 transitions. cyclomatic complexity: 122276 Second operand 5 states. [2019-11-15 23:31:29,495 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:31:29,495 INFO L93 Difference]: Finished difference Result 631028 states and 1168027 transitions. [2019-11-15 23:31:29,495 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-15 23:31:29,496 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 631028 states and 1168027 transitions. [2019-11-15 23:31:34,388 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 177354 [2019-11-15 23:31:36,149 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 631028 states to 631028 states and 1168027 transitions. [2019-11-15 23:31:36,149 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 631028 [2019-11-15 23:31:36,621 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 631028 [2019-11-15 23:31:36,622 INFO L73 IsDeterministic]: Start isDeterministic. Operand 631028 states and 1168027 transitions. [2019-11-15 23:31:36,932 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:31:36,932 INFO L688 BuchiCegarLoop]: Abstraction has 631028 states and 1168027 transitions. [2019-11-15 23:31:37,301 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 631028 states and 1168027 transitions. [2019-11-15 23:31:39,656 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 631028 to 149281. [2019-11-15 23:31:39,656 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149281 states. [2019-11-15 23:31:39,977 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149281 states to 149281 states and 271644 transitions. [2019-11-15 23:31:39,977 INFO L711 BuchiCegarLoop]: Abstraction has 149281 states and 271644 transitions. [2019-11-15 23:31:39,977 INFO L591 BuchiCegarLoop]: Abstraction has 149281 states and 271644 transitions. [2019-11-15 23:31:39,977 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-11-15 23:31:39,977 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 149281 states and 271644 transitions. [2019-11-15 23:31:45,133 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 38202 [2019-11-15 23:31:45,133 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:31:45,134 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:31:45,138 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:45,138 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:45,138 INFO L791 eck$LassoCheckResult]: Stem: 2685938#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 2685939#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2683854#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 2683855#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2684452#L385 assume 0 != main_~tmp~8; 2691347#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2687352#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2687197#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2685299#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2687057#L2485 assume 0 == initPersonOnFloor_~floor; 2690849#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2682484#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2686567#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2688620#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2690374#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2690375#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2691941#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2683122#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2683067#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2687495#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2686329#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2685664#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2686820#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2685009#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2685011#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2690376#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2689205#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2689206#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 2688670#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2688671#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2692500#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2692501#L1675 assume !(0 != timeShift_~tmp___9~2); 2691419#L1766 assume !(1 == ~doorState~0); 2691420#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2690887#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2683952#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2683953#L1401 assume 0 != stopRequestedInDirection_~overload~0; 2688648#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2688649#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2688181#L1217 assume !(0 == ~currentFloorID~0); 2688182#L1223 assume ~currentFloorID~0 > 0; 2689092#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2689093#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2695732#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2695729#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2695730#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2696024#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2696025#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2696318#L1463 assume !(1 == ~currentHeading~0); 2696317#L1473 assume !(0 == ~currentFloorID~0); 2696315#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2695025#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2696265#L2963 assume !(-1 == ~expectedDirection~0); 2696266#L2975 assume !(1 == ~expectedDirection~0); 2696203#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2696204#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2696195#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2696196#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2694880#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2696189#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2736417#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2736413#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2736414#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2776940#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2724931#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2775704#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2775702#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2775700#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2775684#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2775685#L1675-1 assume !(0 != timeShift_~tmp___9~2); 2775314#L1766-3 assume !(1 == ~doorState~0); 2775283#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2775281#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2775272#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2775311#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 2775310#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2775264#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2775303#L1217-6 assume !(0 == ~currentFloorID~0); 2775300#L1223-6 assume ~currentFloorID~0 > 0; 2775298#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2775299#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2775305#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2775302#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2682293#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2821271#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2821272#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2684313#L1463-3 assume !(1 == ~currentHeading~0); 2682223#L1473-9 assume !(0 == ~currentFloorID~0); 2682224#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2682195#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2788351#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2784143#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2788350#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2784096#L2975-1 assume !(1 == ~expectedDirection~0); 2784092#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2784089#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2784083#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2784082#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2697038#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2731260#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2731255#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2731252#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2731249#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2731246#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2731247#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2766959#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2766958#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2766955#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2789031#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2789017#L1675-2 assume !(0 != timeShift_~tmp___9~2); 2720986#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2720959#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2720957#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2720949#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2720984#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 2720983#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2720941#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2720982#L1217-12 assume !(0 == ~currentFloorID~0); 2720981#L1223-12 assume ~currentFloorID~0 > 0; 2720979#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2720976#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2720973#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2720971#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2720972#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2721225#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2721226#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2684324#L1463-6 assume !(1 == ~currentHeading~0); 2682214#L1473-18 assume !(0 == ~currentFloorID~0); 2682215#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2718351#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2804617#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2804610#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2804616#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2804606#L2975-2 assume !(1 == ~expectedDirection~0); 2803696#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2802858#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2802852#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2802851#L2485-1 assume 0 == initPersonOnFloor_~floor; 2802688#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2802671#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2802664#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2802656#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2802655#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2802654#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2802649#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2699050#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2731772#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2731769#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2731767#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2731768#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2790071#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2752984#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2789135#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2730019#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2730016#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2729965#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2729966#L1675-3 assume !(0 != timeShift_~tmp___9~2); 2713865#L1766-9 assume !(1 == ~doorState~0); 2713854#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2713852#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2713843#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2714237#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 2714236#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2713835#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2714232#L1217-18 assume !(0 == ~currentFloorID~0); 2714230#L1223-18 assume ~currentFloorID~0 > 0; 2714227#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2714203#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2714181#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2714171#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2714155#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2714100#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2714101#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2684294#L1463-9 assume !(1 == ~currentHeading~0); 2684295#L1473-27 assume !(0 == ~currentFloorID~0); 2812430#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2713548#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2812428#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2805295#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2806434#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2805290#L2975-3 assume !(1 == ~expectedDirection~0); 2804824#L2976-3 cleanup_~i~0 := 0; 2804823#L188-2 [2019-11-15 23:31:45,139 INFO L793 eck$LassoCheckResult]: Loop: 2804823#L188-2 assume !false; 2804822#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2804821#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 2804820#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2804819#L196 assume 1 != cleanup_~tmp___0~0; 2804817#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2804806#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2804760#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 2804754#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 2804739#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 2804738#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2804737#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2804736#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2804730#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2804728#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2704917#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2793265#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2688760#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2790760#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2787731#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2787730#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2732194#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2787365#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2787265#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2787262#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2730260#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2730261#L1675-4 assume !(0 != timeShift_~tmp___9~2); 2712424#L1766-12 assume !(1 == ~doorState~0); 2712413#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2712411#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2712402#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2712685#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 2712684#L1402-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2712394#L1048-24 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2712678#L1217-24 assume !(0 == ~currentFloorID~0); 2712675#L1223-24 assume ~currentFloorID~0 > 0; 2712672#L1224-24 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2712673#L2214-255 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2712677#L2241-255 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2712669#L1228-24 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2712671#L1370-24 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2712720#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2712721#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2806595#L1463-12 assume !(1 == ~currentHeading~0); 2806593#L1473-36 assume !(0 == ~currentFloorID~0); 2806591#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2712049#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2806590#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2804868#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2806582#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2804858#L2975-4 assume !(1 == ~expectedDirection~0); 2804825#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2804823#L188-2 [2019-11-15 23:31:45,139 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:45,139 INFO L82 PathProgramCache]: Analyzing trace with hash -124285972, now seen corresponding path program 2 times [2019-11-15 23:31:45,140 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:45,140 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2136616340] [2019-11-15 23:31:45,140 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:45,140 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:45,140 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:45,159 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:45,214 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:45,215 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2136616340] [2019-11-15 23:31:45,215 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:45,215 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:31:45,215 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [515636100] [2019-11-15 23:31:45,216 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:31:45,216 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:45,216 INFO L82 PathProgramCache]: Analyzing trace with hash 486337502, now seen corresponding path program 1 times [2019-11-15 23:31:45,217 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:45,217 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [847188144] [2019-11-15 23:31:45,217 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:45,217 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:45,217 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:45,225 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:45,244 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:45,244 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [847188144] [2019-11-15 23:31:45,245 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:45,245 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-15 23:31:45,245 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1100148174] [2019-11-15 23:31:45,245 INFO L808 eck$LassoCheckResult]: loop already infeasible [2019-11-15 23:31:45,245 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:31:45,246 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-15 23:31:45,246 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-15 23:31:45,246 INFO L87 Difference]: Start difference. First operand 149281 states and 271644 transitions. cyclomatic complexity: 122366 Second operand 3 states. [2019-11-15 23:31:46,671 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:31:46,671 INFO L93 Difference]: Finished difference Result 259511 states and 477124 transitions. [2019-11-15 23:31:46,671 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-15 23:31:46,672 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 259511 states and 477124 transitions. [2019-11-15 23:31:47,751 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 68156 [2019-11-15 23:31:48,554 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 259511 states to 259511 states and 477124 transitions. [2019-11-15 23:31:48,554 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 259511 [2019-11-15 23:31:48,753 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 259511 [2019-11-15 23:31:48,753 INFO L73 IsDeterministic]: Start isDeterministic. Operand 259511 states and 477124 transitions. [2019-11-15 23:31:48,889 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:31:48,889 INFO L688 BuchiCegarLoop]: Abstraction has 259511 states and 477124 transitions. [2019-11-15 23:31:49,046 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259511 states and 477124 transitions. [2019-11-15 23:31:51,608 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259511 to 141385. [2019-11-15 23:31:51,608 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 141385 states. [2019-11-15 23:31:51,915 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141385 states to 141385 states and 257540 transitions. [2019-11-15 23:31:51,915 INFO L711 BuchiCegarLoop]: Abstraction has 141385 states and 257540 transitions. [2019-11-15 23:31:51,915 INFO L591 BuchiCegarLoop]: Abstraction has 141385 states and 257540 transitions. [2019-11-15 23:31:51,915 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-11-15 23:31:51,915 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 141385 states and 257540 transitions. [2019-11-15 23:31:52,278 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 36424 [2019-11-15 23:31:52,278 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-15 23:31:52,278 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-15 23:31:52,282 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:52,283 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-15 23:31:52,283 INFO L791 eck$LassoCheckResult]: Stem: 3094371#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25); 3094372#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 3092669#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 3092670#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 3093251#L385 assume 0 != main_~tmp~8; 3099425#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3095584#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3095446#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3093968#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3095310#L2485 assume 0 == initPersonOnFloor_~floor; 3098941#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3091263#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3094911#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3096827#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3098473#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3098474#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3099988#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3091896#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3091838#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3095731#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3094707#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3094212#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3095118#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3095198#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3098475#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3098476#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 3097400#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 3097401#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 3096876#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3096877#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3099683#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3100621#L1675 assume !(0 != timeShift_~tmp___9~2); 3100617#L1766 assume !(1 == ~doorState~0); 3099484#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3098980#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3098590#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3097172#L1401 assume 0 != stopRequestedInDirection_~overload~0; 3097173#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3097274#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3097275#L1217 assume !(0 == ~currentFloorID~0); 3097116#L1223 assume ~currentFloorID~0 > 0; 3097117#L1224 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3100897#L1238 assume ~currentFloorID~0 > 0; 3100214#L1240 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3100216#L1241 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3102707#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3102667#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3102668#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3093162#L1463 assume !(1 == ~currentHeading~0); 3091312#L1473 assume !(0 == ~currentFloorID~0); 3091313#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3101161#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3118691#L2963 assume !(-1 == ~expectedDirection~0); 3118685#L2975 assume !(1 == ~expectedDirection~0); 3118675#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3118665#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3118666#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3118657#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3101136#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3122696#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3141365#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3141363#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3141362#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3141360#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3141252#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3141359#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 3141357#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3141301#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3141300#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3141294#L1675-1 assume !(0 != timeShift_~tmp___9~2); 3111757#L1766-3 assume !(1 == ~doorState~0); 3111755#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3111749#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3111742#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3111738#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 3111728#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3111719#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3111714#L1217-6 assume !(0 == ~currentFloorID~0); 3111707#L1223-6 assume ~currentFloorID~0 > 0; 3111705#L1224-6 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3111699#L1238-6 assume ~currentFloorID~0 > 0; 3111700#L1240-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3111773#L1241-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3111769#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3111736#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3111737#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3093129#L1463-3 assume !(1 == ~currentHeading~0); 3090993#L1473-9 assume !(0 == ~currentFloorID~0); 3090994#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3090972#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3124863#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3124861#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3124862#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3123935#L2975-1 assume !(1 == ~expectedDirection~0); 3123934#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3123919#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3123913#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3123914#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3140624#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3140613#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3140608#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3140603#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3140604#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3150006#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3149980#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3149977#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 3149972#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3149966#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3149964#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3149960#L1675-2 assume !(0 != timeShift_~tmp___9~2); 3118573#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 3118571#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3118568#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3118558#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3118554#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 3118550#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3118540#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3118535#L1217-12 assume !(0 == ~currentFloorID~0); 3118528#L1223-12 assume ~currentFloorID~0 > 0; 3118526#L1224-12 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3118520#L1238-12 assume ~currentFloorID~0 > 0; 3118521#L1240-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3118596#L1241-12 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3118587#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3118578#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3118579#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3139124#L1463-6 assume !(1 == ~currentHeading~0); 3139121#L1473-18 assume !(0 == ~currentFloorID~0); 3139119#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3139118#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3139117#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3138468#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3138974#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3138464#L2975-2 assume !(1 == ~expectedDirection~0); 3138462#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3138461#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3138455#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3138453#L2485-1 assume 0 == initPersonOnFloor_~floor; 3138454#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3144595#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3137772#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3137770#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3137749#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3137750#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3137708#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3103126#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3142871#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3142821#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3142802#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3142803#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3157279#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3157280#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3157287#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 3157286#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3157282#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3157281#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3157254#L1675-3 assume !(0 != timeShift_~tmp___9~2); 3117348#L1766-9 assume !(1 == ~doorState~0); 3117346#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3117339#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3117334#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3117330#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 3117326#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3117322#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3117313#L1217-18 assume !(0 == ~currentFloorID~0); 3117308#L1223-18 assume ~currentFloorID~0 > 0; 3117307#L1224-18 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3117299#L1238-18 assume ~currentFloorID~0 > 0; 3117300#L1240-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3117416#L1241-18 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3117411#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3117354#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3117355#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3146112#L1463-9 assume !(1 == ~currentHeading~0); 3150158#L1473-27 assume !(0 == ~currentFloorID~0); 3150118#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3150115#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3150112#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3150113#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3156859#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3156854#L2975-3 assume !(1 == ~expectedDirection~0); 3156846#L2976-3 cleanup_~i~0 := 0; 3156845#L188-2 [2019-11-15 23:31:52,284 INFO L793 eck$LassoCheckResult]: Loop: 3156845#L188-2 assume !false; 3156844#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3156843#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 3156842#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 3156841#L196 assume 1 != cleanup_~tmp___0~0; 3156840#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 3156837#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 3156834#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 3156833#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 3156819#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 3156818#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 3156817#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3156816#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3156815#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3156748#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3156746#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3156742#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3156735#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3156732#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3156733#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3157627#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3157615#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3157610#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 3157608#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3157601#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3157595#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3157593#L1675-4 assume !(0 != timeShift_~tmp___9~2); 3151020#L1766-12 assume !(1 == ~doorState~0); 3151018#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3150909#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3150905#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3150903#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 3150850#L1402-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3150844#L1048-24 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3102983#L1217-24 assume !(0 == ~currentFloorID~0); 3102946#L1223-24 assume ~currentFloorID~0 > 0; 3102947#L1224-24 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3150845#L1238-24 assume ~currentFloorID~0 > 0; 3100320#L1240-24 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3100322#L1241-24 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3148582#L1370-24 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3148575#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3148571#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3093118#L1463-12 assume !(1 == ~currentHeading~0); 3093119#L1473-36 assume !(0 == ~currentFloorID~0); 3150181#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3150180#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3150101#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3150102#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3156852#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3156851#L2975-4 assume !(1 == ~expectedDirection~0); 3156847#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 3156845#L188-2 [2019-11-15 23:31:52,284 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:52,284 INFO L82 PathProgramCache]: Analyzing trace with hash 416862982, now seen corresponding path program 1 times [2019-11-15 23:31:52,285 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:52,285 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [28301024] [2019-11-15 23:31:52,285 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:52,285 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:52,285 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:52,306 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:31:52,367 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:31:52,367 INFO L342 tionRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [28301024] [2019-11-15 23:31:52,367 INFO L223 tionRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-15 23:31:52,368 INFO L236 tionRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-15 23:31:52,368 INFO L342 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1571632501] [2019-11-15 23:31:52,368 INFO L796 eck$LassoCheckResult]: stem already infeasible [2019-11-15 23:31:52,368 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:31:52,369 INFO L82 PathProgramCache]: Analyzing trace with hash 354402529, now seen corresponding path program 1 times [2019-11-15 23:31:52,369 INFO L157 tionRefinementEngine]: Executing refinement strategy CAMEL [2019-11-15 23:31:52,369 INFO L342 tionRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1336322288] [2019-11-15 23:31:52,369 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:52,370 INFO L116 rtionOrderModulation]: Craig_NestedInterpolation forces the order to NOT_INCREMENTALLY [2019-11-15 23:31:52,370 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-15 23:31:52,388 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-11-15 23:31:52,406 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-11-15 23:31:52,480 INFO L168 tionRefinementEngine]: Strategy CAMEL found a feasible trace [2019-11-15 23:31:53,677 WARN L191 SmtUtils]: Spent 1.19 s on a formula simplification. DAG size of input: 232 DAG size of output: 203 [2019-11-15 23:31:57,048 WARN L191 SmtUtils]: Spent 3.27 s on a formula simplification. DAG size of input: 222 DAG size of output: 178 [2019-11-15 23:31:57,061 INFO L210 LassoAnalysis]: Preferences: [2019-11-15 23:31:57,061 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2019-11-15 23:31:57,062 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-11-15 23:31:57,062 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2019-11-15 23:31:57,062 INFO L127 ssoRankerPreferences]: Use exernal solver: true [2019-11-15 23:31:57,062 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:57,063 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2019-11-15 23:31:57,063 INFO L130 ssoRankerPreferences]: Path of dumped script: [2019-11-15 23:31:57,063 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product21.cil.c_Iteration15_Loop [2019-11-15 23:31:57,063 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2019-11-15 23:31:57,064 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-11-15 23:31:57,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,215 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,217 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,220 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,222 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,231 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,236 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,258 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,266 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,270 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,271 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,273 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,283 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,309 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,404 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,406 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,408 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,409 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,421 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,423 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,425 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,429 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,444 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,450 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,465 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,473 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,479 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,481 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,485 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,487 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:57,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,063 WARN L191 SmtUtils]: Spent 541.00 ms on a formula simplification that was a NOOP. DAG size: 1 [2019-11-15 23:31:58,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,068 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,073 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,141 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,176 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,185 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:31:58,498 WARN L191 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 56 DAG size of output: 54 [2019-11-15 23:31:59,368 WARN L191 SmtUtils]: Spent 381.00 ms on a formula simplification. DAG size of input: 60 DAG size of output: 47 [2019-11-15 23:31:59,641 WARN L191 SmtUtils]: Spent 143.00 ms on a formula simplification that was a NOOP. DAG size: 42 [2019-11-15 23:31:59,708 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-11-15 23:31:59,709 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,719 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,719 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,729 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,729 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret31=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret31=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,752 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,752 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,758 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,758 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:31:59,783 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,783 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,806 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,806 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:31:59,843 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,843 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,849 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,849 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls=0, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectFloorCalls=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls=0, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectFloorCalls=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:31:59,896 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,896 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,901 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,901 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret63=0} Honda state: {ULTIMATE.start_timeShift_#t~ret63=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,918 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,918 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,926 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,927 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret29=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret29=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,944 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,944 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,949 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,949 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=-8} Honda state: {~doorState~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,954 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,955 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,959 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,959 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,967 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,967 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,972 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,972 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___8~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:31:59,991 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:31:59,991 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:31:59,998 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:31:59,998 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11=1, ULTIMATE.start_isIdle_~tmp~14=1} Honda state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11=1, ULTIMATE.start_isIdle_~tmp~14=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,019 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,019 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,026 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,026 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~0=0, ULTIMATE.start_isBlocked_~retValue_acc~5=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~0=0, ULTIMATE.start_isBlocked_~retValue_acc~5=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,038 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,041 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,045 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,045 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~17=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~17=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,050 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,050 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,054 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,054 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,066 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,067 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,071 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,071 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret22=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,085 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,085 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,088 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,088 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret26=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret26=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,095 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,096 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,099 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,100 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,106 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,107 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,111 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,111 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,116 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,116 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,119 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,119 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret32=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret32=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,126 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,126 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,131 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,131 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret43=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret43=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,154 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,154 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,159 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,159 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___3~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,172 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,172 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,175 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,176 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret131=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret131=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,181 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,182 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,185 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,185 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret42=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,204 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,204 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,207 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,207 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret62=0} Honda state: {ULTIMATE.start_timeShift_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,215 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,215 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,220 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,220 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~floorButtons_0~0=4, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=4} Honda state: {~floorButtons_0~0=4, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,225 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,225 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,228 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,228 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___9~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,232 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,232 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,235 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,236 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,242 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,242 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,250 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,250 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret46=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret46=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,259 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,259 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,263 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,264 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret37=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret37=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,274 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,274 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,278 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,279 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,286 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,287 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,291 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,291 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,298 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,299 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,303 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,303 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~4=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,822 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,822 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,833 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,833 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret124=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret124=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,843 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,843 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,850 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,850 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,862 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,862 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,870 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,870 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~6=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,881 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,881 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,886 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,887 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,898 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,899 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,904 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,905 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret33=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret33=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,914 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,914 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,919 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,919 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,930 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,931 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,935 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,935 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret65=0} Honda state: {ULTIMATE.start_timeShift_#t~ret65=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,959 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,959 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,965 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,965 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:00,974 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,975 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,979 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,979 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret128=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret128=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,985 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,985 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:00,988 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:00,989 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret39=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret39=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:00,994 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:00,994 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,003 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,003 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=7, ~calls_0~0=7, ULTIMATE.start_anyStopRequested_~tmp___3~0=7, ULTIMATE.start_isFloorCalling_~retValue_acc~20=7} Honda state: {ULTIMATE.start_isFloorCalling_#res=7, ~calls_0~0=7, ULTIMATE.start_anyStopRequested_~tmp___3~0=7, ULTIMATE.start_isFloorCalling_~retValue_acc~20=7} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,014 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,014 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,023 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,023 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ~floorButtons_1~0=-8, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~8=-8} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ~floorButtons_1~0=-8, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~8=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,030 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,030 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,064 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,065 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp5~0=0, ~maximumWeight~0=-1, ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp4~1=-2, ~weight~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp9~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=-2} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp5~0=0, ~maximumWeight~0=-1, ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp4~1=-2, ~weight~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp9~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=-2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,070 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,070 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,073 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,073 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret23=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,078 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,078 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,081 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,081 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~13=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,086 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,086 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,089 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,089 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret70=0} Honda state: {ULTIMATE.start_timeShift_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,094 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,094 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,097 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,098 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,102 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,102 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,106 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,106 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret34=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret34=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,110 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,111 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,114 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,114 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret64=0} Honda state: {ULTIMATE.start_timeShift_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,119 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,120 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,123 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,123 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp~15=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp~15=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,129 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,129 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,132 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,132 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~9=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,137 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,137 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,140 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,140 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,145 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,145 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,148 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,148 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,158 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,158 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,162 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,163 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~floorID=0} Honda state: {ULTIMATE.start_isFloorCalling_~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,175 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,175 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,179 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,179 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret122=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret122=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,186 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,186 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,189 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,189 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,194 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,194 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,197 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,197 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~overload~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~overload~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,202 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,202 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,206 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,206 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret38=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret38=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,210 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,210 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,213 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,214 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,219 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,219 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,222 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,222 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~24=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,228 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,228 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,233 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,233 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret35=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret35=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,239 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,239 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-15 23:32:01,250 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,250 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,266 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,266 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:01,271 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-15 23:32:01,271 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___4~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___4~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,282 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-15 23:32:01,282 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e8081ecc-fcd4-4b27-bbb7-ff71c57fe8b7/bin/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-15 23:32:01,302 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-11-15 23:32:01,302 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:02,051 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-11-15 23:32:02,053 INFO L210 LassoAnalysis]: Preferences: [2019-11-15 23:32:02,053 INFO L124 ssoRankerPreferences]: Compute integeral hull: false [2019-11-15 23:32:02,053 INFO L125 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-11-15 23:32:02,053 INFO L126 ssoRankerPreferences]: Term annotations enabled: false [2019-11-15 23:32:02,053 INFO L127 ssoRankerPreferences]: Use exernal solver: false [2019-11-15 23:32:02,054 INFO L128 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-15 23:32:02,054 INFO L129 ssoRankerPreferences]: Dump SMT script to file: false [2019-11-15 23:32:02,054 INFO L130 ssoRankerPreferences]: Path of dumped script: [2019-11-15 23:32:02,054 INFO L131 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product21.cil.c_Iteration15_Loop [2019-11-15 23:32:02,054 INFO L132 ssoRankerPreferences]: MapElimAlgo: Frank [2019-11-15 23:32:02,054 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-11-15 23:32:02,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,090 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,093 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,110 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,122 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,124 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,133 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,147 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,149 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,180 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,192 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,343 WARN L191 SmtUtils]: Spent 143.00 ms on a formula simplification. DAG size of input: 39 DAG size of output: 32 [2019-11-15 23:32:02,343 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,347 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,363 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,382 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,393 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,397 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,410 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,433 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,437 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,439 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,441 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,443 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,446 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,467 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,472 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,475 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,486 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,517 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,526 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,528 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,531 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,557 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,562 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,564 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,594 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,597 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,599 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,607 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,620 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,622 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,624 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,627 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,629 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,635 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,645 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,647 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,651 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,662 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,664 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,668 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:02,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-15 23:32:03,016 WARN L191 SmtUtils]: Spent 199.00 ms on a formula simplification. DAG size of input: 56 DAG size of output: 55 [2019-11-15 23:32:03,691 WARN L191 SmtUtils]: Spent 319.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 48 [2019-11-15 23:32:04,042 WARN L191 SmtUtils]: Spent 143.00 ms on a formula simplification that was a NOOP. DAG size: 42 [2019-11-15 23:32:04,113 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-11-15 23:32:04,119 INFO L489 LassoAnalysis]: Using template 'affine'. [2019-11-15 23:32:04,121 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,122 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,123 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,123 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,124 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,124 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,126 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,127 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,129 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,129 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,130 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,130 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,130 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,131 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,131 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,131 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,131 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,132 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,132 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,133 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,133 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,133 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,134 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,134 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,134 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,134 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,135 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,135 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,136 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,136 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,136 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,136 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,137 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,137 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,137 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,138 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,139 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,139 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,139 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,140 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,140 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,140 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,141 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,141 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,141 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,142 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,142 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,143 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,143 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,143 INFO L203 nArgumentSynthesizer]: 2 loop disjuncts [2019-11-15 23:32:04,143 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,144 INFO L400 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-11-15 23:32:04,144 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,145 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,145 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,146 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,146 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,146 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,146 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,147 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,147 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,147 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,148 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,148 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,149 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,149 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,149 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,149 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,150 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,150 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,150 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,152 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,153 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,153 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,154 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,154 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,154 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,154 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,154 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,155 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,155 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,156 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,156 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,156 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,156 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,157 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,157 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,157 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,157 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,158 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,158 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,159 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,159 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,159 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,159 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,159 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,160 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,160 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,161 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,161 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,161 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,162 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,162 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,162 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,162 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,163 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,163 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,163 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,164 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,164 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,164 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,165 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,165 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,165 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,166 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,166 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,166 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,167 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,167 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,168 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,168 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,168 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,168 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,169 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,169 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,169 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,170 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,170 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,171 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,171 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,171 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,171 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,172 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,172 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,172 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,173 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,173 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,174 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,174 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,174 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,174 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,175 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,175 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,175 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,176 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,176 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,176 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,177 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,177 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,177 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,177 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,178 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,178 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,179 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,179 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,179 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,179 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,180 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,180 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,180 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,180 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,181 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,181 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,182 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,182 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,182 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,182 INFO L203 nArgumentSynthesizer]: 2 loop disjuncts [2019-11-15 23:32:04,183 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,184 INFO L400 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-11-15 23:32:04,184 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,186 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,187 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,187 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,187 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,187 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,188 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,188 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,188 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,188 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,189 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,190 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,190 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,190 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,190 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,191 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,191 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,191 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,191 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,192 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,193 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,193 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,193 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,193 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,194 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,194 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,194 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,194 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,195 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,195 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,196 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,196 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,196 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,197 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,197 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,197 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,197 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,198 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,198 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,199 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,199 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,199 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,199 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,200 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,200 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,200 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,201 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,201 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,202 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,202 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,202 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,202 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,203 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,203 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,203 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,204 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,204 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,205 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,205 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,205 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,206 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,206 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,206 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,206 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,207 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,207 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,208 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,208 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,208 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,209 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,209 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,209 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,209 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,210 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,210 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,211 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,211 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,211 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,212 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,212 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,212 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,212 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,213 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,213 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,214 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,214 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,214 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,214 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,215 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,215 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,215 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,216 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,216 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,217 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,217 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,217 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,217 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,218 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,218 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,218 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,219 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,220 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,220 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,220 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,221 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,221 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,221 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,221 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,221 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,222 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,222 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,223 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,223 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,223 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,224 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,224 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,224 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,224 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,225 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,225 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,226 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,226 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,226 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,227 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,227 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,227 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,227 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,228 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,228 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,229 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,229 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,229 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,230 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,230 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,230 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,230 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,231 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,232 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,232 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,232 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,233 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,233 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,233 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,233 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,234 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,234 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,235 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,235 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,235 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,236 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,236 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,236 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,236 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,237 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,237 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,238 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,238 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,238 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,239 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,239 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,239 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,239 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,240 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,240 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,241 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,241 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,241 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,242 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,242 INFO L203 nArgumentSynthesizer]: 3 loop disjuncts [2019-11-15 23:32:04,242 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,245 INFO L400 nArgumentSynthesizer]: We have 6 Motzkin's Theorem applications. [2019-11-15 23:32:04,245 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,251 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,252 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,252 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,252 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,253 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,253 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,253 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,253 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,254 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,254 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,255 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,255 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,255 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,256 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,256 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,256 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,256 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,256 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,257 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,258 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,258 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,258 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,259 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,259 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,259 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,259 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,259 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,260 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,260 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,261 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,261 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,261 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,262 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,262 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,262 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,262 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,263 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,263 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,264 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,264 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,264 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,265 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,265 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,265 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,265 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,266 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,266 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,267 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,267 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,267 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,267 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,268 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,268 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,268 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,269 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,269 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,270 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,270 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,270 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,270 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,271 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,271 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,271 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,272 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,272 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,273 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,273 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,273 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,274 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,274 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,274 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,274 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,275 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,275 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,276 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,276 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,276 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,277 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,277 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,277 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,277 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,278 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,278 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,279 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,279 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,279 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,280 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,280 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,280 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,280 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,281 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,281 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,282 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,282 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,282 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,282 INFO L203 nArgumentSynthesizer]: 2 loop disjuncts [2019-11-15 23:32:04,283 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,284 INFO L400 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-11-15 23:32:04,284 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,287 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,287 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,288 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,288 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,288 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,289 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,289 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,289 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,290 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,290 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,291 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,291 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,291 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,292 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,292 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,292 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,292 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,293 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,293 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,294 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,294 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,294 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,295 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,295 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,295 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,295 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,296 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,296 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,297 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,297 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,297 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,298 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,298 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,298 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,298 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,298 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,300 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,300 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,301 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,301 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,301 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,301 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,301 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,302 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,302 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,303 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,303 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,303 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,304 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,304 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,304 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,304 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,305 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,305 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,305 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,306 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,306 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,307 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,307 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,307 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,307 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,307 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,308 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,308 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,309 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,309 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,309 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,310 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,310 INFO L203 nArgumentSynthesizer]: 2 loop disjuncts [2019-11-15 23:32:04,310 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,311 INFO L400 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-11-15 23:32:04,311 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,315 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. [2019-11-15 23:32:04,315 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-15 23:32:04,316 INFO L337 nArgumentSynthesizer]: Template has degree 0. [2019-11-15 23:32:04,316 INFO L350 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-15 23:32:04,316 INFO L202 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-15 23:32:04,316 INFO L203 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-15 23:32:04,317 INFO L204 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-15 23:32:04,317 INFO L400 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-15 23:32:04,317 INFO L401 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-15 23:32:04,320 INFO L419 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-11-15 23:32:04,323 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-11-15 23:32:04,323 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. [2019-11-15 23:32:04,325 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-11-15 23:32:04,326 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-11-15 23:32:04,326 INFO L510 LassoAnalysis]: Proved termination. [2019-11-15 23:32:04,327 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2019-11-15 23:32:04,328 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-11-15 23:32:04,367 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-15 23:32:04,634 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:32:04,641 INFO L256 TraceCheckSpWp]: Trace formula consists of 1226 conjuncts, 2 conjunts are in the unsatisfiable core [2019-11-15 23:32:04,658 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-11-15 23:32:04,749 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-15 23:32:04,750 INFO L256 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 5 conjunts are in the unsatisfiable core [2019-11-15 23:32:04,758 INFO L279 TraceCheckSpWp]: Computing forward predicates... [2019-11-15 23:32:04,808 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-15 23:32:04,819 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2019-11-15 23:32:04,820 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 141385 states and 257540 transitions. cyclomatic complexity: 116158 Second operand 5 states. [2019-11-15 23:32:06,733 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 141385 states and 257540 transitions. cyclomatic complexity: 116158. Second operand 5 states. Result 177809 states and 323744 transitions. Complement of second has 8 states. [2019-11-15 23:32:06,734 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-11-15 23:32:06,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-11-15 23:32:06,751 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 14193 transitions. [2019-11-15 23:32:06,753 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14193 transitions. Stem has 182 letters. Loop has 52 letters. [2019-11-15 23:32:06,760 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-15 23:32:06,760 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14193 transitions. Stem has 234 letters. Loop has 52 letters. [2019-11-15 23:32:06,763 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-15 23:32:06,763 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14193 transitions. Stem has 182 letters. Loop has 104 letters. [2019-11-15 23:32:06,764 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-15 23:32:06,764 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 177809 states and 323744 transitions. [2019-11-15 23:32:07,482 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-15 23:32:07,483 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 177809 states to 0 states and 0 transitions. [2019-11-15 23:32:07,483 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-11-15 23:32:07,483 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-11-15 23:32:07,483 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-11-15 23:32:07,483 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:32:07,483 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 23:32:07,483 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 23:32:07,483 INFO L137 tionRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-15 23:32:07,484 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-15 23:32:07,484 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-15 23:32:07,484 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2019-11-15 23:32:07,484 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-15 23:32:07,484 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-11-15 23:32:07,484 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-11-15 23:32:07,485 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-11-15 23:32:07,485 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-15 23:32:07,485 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-11-15 23:32:07,485 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-11-15 23:32:07,485 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-11-15 23:32:07,486 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-11-15 23:32:07,486 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-15 23:32:07,486 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 23:32:07,486 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 23:32:07,486 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-15 23:32:07,486 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-11-15 23:32:07,487 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-11-15 23:32:07,487 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-15 23:32:07,487 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-11-15 23:32:07,494 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 15.11 11:32:07 BoogieIcfgContainer [2019-11-15 23:32:07,494 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-11-15 23:32:07,495 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-15 23:32:07,495 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-15 23:32:07,495 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-15 23:32:07,496 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 15.11 11:29:43" (3/4) ... [2019-11-15 23:32:07,499 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-11-15 23:32:07,499 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-15 23:32:07,500 INFO L168 Benchmark]: Toolchain (without parser) took 164403.95 ms. Allocated memory was 1.0 GB in the beginning and 5.8 GB in the end (delta: 4.8 GB). Free memory was 935.6 MB in the beginning and 4.1 GB in the end (delta: -3.1 GB). Peak memory consumption was 1.6 GB. Max. memory is 11.5 GB. [2019-11-15 23:32:07,500 INFO L168 Benchmark]: CDTParser took 0.34 ms. Allocated memory is still 1.0 GB. Free memory is still 963.8 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-15 23:32:07,500 INFO L168 Benchmark]: CACSL2BoogieTranslator took 1073.01 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 122.7 MB). Free memory was 935.6 MB in the beginning and 1.1 GB in the end (delta: -142.2 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. [2019-11-15 23:32:07,501 INFO L168 Benchmark]: Boogie Procedure Inliner took 407.43 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 986.6 MB in the end (delta: 91.3 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. [2019-11-15 23:32:07,501 INFO L168 Benchmark]: Boogie Preprocessor took 628.01 ms. Allocated memory is still 1.2 GB. Free memory was 986.6 MB in the beginning and 900.7 MB in the end (delta: 85.9 MB). Peak memory consumption was 85.9 MB. Max. memory is 11.5 GB. [2019-11-15 23:32:07,502 INFO L168 Benchmark]: RCFGBuilder took 17909.41 ms. Allocated memory was 1.2 GB in the beginning and 2.0 GB in the end (delta: 803.7 MB). Free memory was 900.7 MB in the beginning and 1.8 GB in the end (delta: -877.3 MB). Peak memory consumption was 582.1 MB. Max. memory is 11.5 GB. [2019-11-15 23:32:07,502 INFO L168 Benchmark]: BuchiAutomizer took 144377.41 ms. Allocated memory was 2.0 GB in the beginning and 5.8 GB in the end (delta: 3.8 GB). Free memory was 1.8 GB in the beginning and 4.1 GB in the end (delta: -2.3 GB). Peak memory consumption was 1.5 GB. Max. memory is 11.5 GB. [2019-11-15 23:32:07,503 INFO L168 Benchmark]: Witness Printer took 4.25 ms. Allocated memory is still 5.8 GB. Free memory is still 4.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-15 23:32:07,505 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.34 ms. Allocated memory is still 1.0 GB. Free memory is still 963.8 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 1073.01 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 122.7 MB). Free memory was 935.6 MB in the beginning and 1.1 GB in the end (delta: -142.2 MB). Peak memory consumption was 29.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 407.43 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 986.6 MB in the end (delta: 91.3 MB). Peak memory consumption was 91.3 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 628.01 ms. Allocated memory is still 1.2 GB. Free memory was 986.6 MB in the beginning and 900.7 MB in the end (delta: 85.9 MB). Peak memory consumption was 85.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 17909.41 ms. Allocated memory was 1.2 GB in the beginning and 2.0 GB in the end (delta: 803.7 MB). Free memory was 900.7 MB in the beginning and 1.8 GB in the end (delta: -877.3 MB). Peak memory consumption was 582.1 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 144377.41 ms. Allocated memory was 2.0 GB in the beginning and 5.8 GB in the end (delta: 3.8 GB). Free memory was 1.8 GB in the beginning and 4.1 GB in the end (delta: -2.3 GB). Peak memory consumption was 1.5 GB. Max. memory is 11.5 GB. * Witness Printer took 4.25 ms. Allocated memory is still 5.8 GB. Free memory is still 4.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 16 terminating modules (15 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 15 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 144.3s and 16 iterations. TraceHistogramMax:1. Analysis of lassos took 14.9s. Construction of modules took 42.8s. Büchi inclusion checks took 25.7s. Highest rank in rank-based complementation 3. Minimization of det autom 16. Minimization of nondet autom 0. Automata minimization 16.3s AutomataMinimizationTime, 14 MinimizatonAttempts, 1310029 StatesRemovedByMinimization, 14 NontrivialMinimizations. Non-live state removal took 33.7s Buchi closure took 1.5s. Biggest automaton had 149281 states and ocurred in iteration 13. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 316142 SDtfs, 1055983 SDslu, 594268 SDs, 0 SdLazy, 49690 SolverSat, 9771 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 42.8s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI14 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital741 mio100 ax100 hnf100 lsp20 ukn42 mio100 lsp100 div252 bol100 ite100 ukn100 eq136 hnf61 smp94 dnf880 smp19 tf100 neg99 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 10ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 3 SupportingInvariants: 0 MotzkinApplications: 6 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 64 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 2.1s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...