./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version 678e0110 Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 5f6e99961ac853f3709ebf596b9583b8c3fd14e8 .............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................. Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.24-678e011 [2019-11-20 05:34:13,489 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-11-20 05:34:13,490 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-11-20 05:34:13,505 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-11-20 05:34:13,505 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-11-20 05:34:13,506 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-11-20 05:34:13,508 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-11-20 05:34:13,516 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-11-20 05:34:13,521 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-11-20 05:34:13,525 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-11-20 05:34:13,526 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-11-20 05:34:13,527 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-11-20 05:34:13,527 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-11-20 05:34:13,529 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-11-20 05:34:13,530 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-11-20 05:34:13,531 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-11-20 05:34:13,532 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-11-20 05:34:13,533 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-11-20 05:34:13,535 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-11-20 05:34:13,539 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-11-20 05:34:13,542 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-11-20 05:34:13,543 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-11-20 05:34:13,544 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-11-20 05:34:13,544 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-11-20 05:34:13,546 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-11-20 05:34:13,547 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-11-20 05:34:13,547 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-11-20 05:34:13,547 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-11-20 05:34:13,548 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-11-20 05:34:13,548 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-11-20 05:34:13,549 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-11-20 05:34:13,549 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-11-20 05:34:13,550 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-11-20 05:34:13,550 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-11-20 05:34:13,551 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-11-20 05:34:13,551 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-11-20 05:34:13,552 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-11-20 05:34:13,552 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-11-20 05:34:13,552 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-11-20 05:34:13,553 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-11-20 05:34:13,553 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-11-20 05:34:13,554 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-11-20 05:34:13,567 INFO L113 SettingsManager]: Loading preferences was successful [2019-11-20 05:34:13,568 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-11-20 05:34:13,568 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-11-20 05:34:13,569 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-11-20 05:34:13,569 INFO L138 SettingsManager]: * Use SBE=true [2019-11-20 05:34:13,569 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-11-20 05:34:13,569 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-11-20 05:34:13,569 INFO L138 SettingsManager]: * Use old map elimination=false [2019-11-20 05:34:13,569 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-11-20 05:34:13,569 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-11-20 05:34:13,570 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-11-20 05:34:13,570 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-11-20 05:34:13,570 INFO L138 SettingsManager]: * sizeof long=4 [2019-11-20 05:34:13,570 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-11-20 05:34:13,570 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-11-20 05:34:13,570 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * sizeof long double=12 [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-11-20 05:34:13,571 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-11-20 05:34:13,572 INFO L138 SettingsManager]: * Use constant arrays=true [2019-11-20 05:34:13,572 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-11-20 05:34:13,572 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-11-20 05:34:13,572 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-11-20 05:34:13,572 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-11-20 05:34:13,573 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-11-20 05:34:13,573 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-11-20 05:34:13,573 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-11-20 05:34:13,573 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-11-20 05:34:13,574 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 5f6e99961ac853f3709ebf596b9583b8c3fd14e8 [2019-11-20 05:34:13,735 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-11-20 05:34:13,750 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-11-20 05:34:13,753 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-11-20 05:34:13,755 INFO L271 PluginConnector]: Initializing CDTParser... [2019-11-20 05:34:13,755 INFO L275 PluginConnector]: CDTParser initialized [2019-11-20 05:34:13,756 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2019-11-20 05:34:13,810 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/data/5967cadfe/67e04c77d80144f2bf3c5987b4dae7e0/FLAGced7ce0b2 [2019-11-20 05:34:14,332 INFO L306 CDTParser]: Found 1 translation units. [2019-11-20 05:34:14,333 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/sv-benchmarks/c/product-lines/elevator_spec3_product01.cil.c [2019-11-20 05:34:14,360 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/data/5967cadfe/67e04c77d80144f2bf3c5987b4dae7e0/FLAGced7ce0b2 [2019-11-20 05:34:14,538 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/data/5967cadfe/67e04c77d80144f2bf3c5987b4dae7e0 [2019-11-20 05:34:14,540 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-11-20 05:34:14,541 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-11-20 05:34:14,542 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-11-20 05:34:14,542 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-11-20 05:34:14,546 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-11-20 05:34:14,547 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:34:14" (1/1) ... [2019-11-20 05:34:14,549 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1a212b95 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:14, skipping insertion in model container [2019-11-20 05:34:14,550 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 20.11 05:34:14" (1/1) ... [2019-11-20 05:34:14,556 INFO L142 MainTranslator]: Starting translation in SV-COMP mode [2019-11-20 05:34:14,623 INFO L173 MainTranslator]: Built tables and reachable declarations [2019-11-20 05:34:15,151 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-20 05:34:15,166 INFO L188 MainTranslator]: Completed pre-run [2019-11-20 05:34:15,347 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-11-20 05:34:15,404 INFO L192 MainTranslator]: Completed translation [2019-11-20 05:34:15,405 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15 WrapperNode [2019-11-20 05:34:15,405 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-11-20 05:34:15,407 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-11-20 05:34:15,407 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-11-20 05:34:15,407 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-11-20 05:34:15,414 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:15,442 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:15,715 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-11-20 05:34:15,716 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-11-20 05:34:15,716 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-11-20 05:34:15,716 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-11-20 05:34:15,730 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:15,731 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:15,771 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:15,771 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:15,906 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:16,030 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:16,071 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... [2019-11-20 05:34:16,120 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-11-20 05:34:16,121 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-11-20 05:34:16,121 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-11-20 05:34:16,122 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-11-20 05:34:16,122 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:34:16,192 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-11-20 05:34:16,192 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-11-20 05:34:16,193 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-11-20 05:34:16,193 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-11-20 05:34:27,661 INFO L280 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-11-20 05:34:27,661 INFO L285 CfgBuilder]: Removed 1107 assume(true) statements. [2019-11-20 05:34:27,664 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:34:27 BoogieIcfgContainer [2019-11-20 05:34:27,665 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-11-20 05:34:27,665 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-11-20 05:34:27,665 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-11-20 05:34:27,668 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-11-20 05:34:27,669 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-20 05:34:27,669 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 20.11 05:34:14" (1/3) ... [2019-11-20 05:34:27,670 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@370741a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 05:34:27, skipping insertion in model container [2019-11-20 05:34:27,671 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-20 05:34:27,671 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 20.11 05:34:15" (2/3) ... [2019-11-20 05:34:27,671 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@370741a0 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 20.11 05:34:27, skipping insertion in model container [2019-11-20 05:34:27,671 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-11-20 05:34:27,672 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:34:27" (3/3) ... [2019-11-20 05:34:27,673 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product01.cil.c [2019-11-20 05:34:27,711 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-11-20 05:34:27,711 INFO L357 BuchiCegarLoop]: Hoare is false [2019-11-20 05:34:27,711 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-11-20 05:34:27,711 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-11-20 05:34:27,711 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-11-20 05:34:27,712 INFO L361 BuchiCegarLoop]: Difference is false [2019-11-20 05:34:27,712 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-11-20 05:34:27,712 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-11-20 05:34:27,784 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5583 states. [2019-11-20 05:34:27,894 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1134 [2019-11-20 05:34:27,895 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:27,895 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:27,913 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:27,914 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:27,914 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-11-20 05:34:27,914 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 5583 states. [2019-11-20 05:34:27,971 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1134 [2019-11-20 05:34:27,972 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:27,972 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:27,977 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:27,977 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:27,987 INFO L794 eck$LassoCheckResult]: Stem: 2756#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 4186#L-1true havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 5442#L1856true havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 4697#L1864true main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 3512#L385true assume 0 != main_~tmp~8; 3860#L358true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 940#L692true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3778#L444true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3549#L469true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4017#L970true assume 0 == initPersonOnFloor_~floor; 4162#L971true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2659#L1078-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2217#L762true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 27#L774-2true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 455#L2092true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3631#L2144true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 60#L1305true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1090#L1306true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4488#L2109true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4773#L2130true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1011#L1310true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3952#L1411true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 799#L699true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2832#L726true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 675#L2705true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1138#L2717true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3321#L2854true assume !(0 != timeShift_~tmp___9~3); 3136#L2945true assume !(1 == ~doorState~0); 3138#L2945-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3838#L2296true assume !(1 == stopRequestedInDirection_~dir); 4215#L2465true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 603#L2618true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1435#L2953true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3673#L2672true assume !(1 == ~currentHeading~0); 1898#L2682true assume !(0 == ~currentFloorID~0); 1881#L2682-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1339#L2688-5true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2511#L1436true assume !(-1 == ~expectedDirection~0); 3097#L1448true assume !(1 == ~expectedDirection~0); 1857#L1449true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 454#L2092-1true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3602#L2144-3true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 64#L1305-1true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1333#L1367-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4452#L2109-16true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4739#L2130-16true __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1269#L1371-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3956#L1411-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4493#L699-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2744#L726-21true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 680#L2705-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1142#L2717-1true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3324#L2854-1true assume !(0 != timeShift_~tmp___9~3); 3122#L2945-3true assume !(1 == ~doorState~0); 3130#L2945-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 3841#L2296-2true assume !(1 == stopRequestedInDirection_~dir); 4219#L2465-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 578#L2618-2true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1443#L2953-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3655#L2672-3true assume !(1 == ~currentHeading~0); 1869#L2682-9true assume !(0 == ~currentFloorID~0); 1872#L2682-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1337#L2688-11true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2512#L1436-1true assume !(-1 == ~expectedDirection~0); 3100#L1448-1true assume !(1 == ~expectedDirection~0); 1863#L1449-1true havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 456#L2092-2true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3609#L2144-6true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 65#L1305-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1334#L1367-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4426#L2109-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 4711#L2130-27true __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1275#L1371-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3958#L1411-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4444#L699-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2585#L726-42true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 678#L2705-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1140#L2717-2true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3308#L2854-2true assume !(0 != timeShift_~tmp___9~3); 3127#L2945-6true assume !(1 == ~doorState~0); 3108#L2945-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5446#L2296-4true assume !(1 == stopRequestedInDirection_~dir); 4195#L2465-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 581#L2618-4true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1440#L2953-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3662#L2672-6true assume !(1 == ~currentHeading~0); 1821#L2682-18true assume !(0 == ~currentFloorID~0); 1825#L2682-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1474#L2688-17true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2513#L1436-2true assume !(-1 == ~expectedDirection~0); 3104#L1448-2true assume !(1 == ~expectedDirection~0); 1866#L1449-2true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3783#L444-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3548#L469-1true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3998#L970-1true assume 0 == initPersonOnFloor_~floor; 4159#L971-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2838#L1078-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2207#L762-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 40#L774-5true havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 443#L2092-3true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3584#L2144-9true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 69#L1305-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1067#L1306-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4417#L2109-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2921#L2130-33true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1001#L1310-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3960#L1411-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4638#L699-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2539#L726-63true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 658#L2705-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1144#L2717-3true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3306#L2854-3true assume !(0 != timeShift_~tmp___9~3); 3114#L2945-9true assume !(1 == ~doorState~0); 3116#L2945-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5448#L2296-6true assume !(1 == stopRequestedInDirection_~dir); 4197#L2465-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 422#L2618-6true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1446#L2953-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3637#L2672-9true assume !(1 == ~currentHeading~0); 1807#L2682-27true assume !(0 == ~currentFloorID~0); 1983#L2682-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1438#L2688-23true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2509#L1436-3true assume !(-1 == ~expectedDirection~0); 3106#L1448-3true assume !(1 == ~expectedDirection~0); 1870#L1449-3true cleanup_~i~0 := 0; 4868#L188-2true [2019-11-20 05:34:27,989 INFO L796 eck$LassoCheckResult]: Loop: 4868#L188-2true assume !false; 5034#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 4800#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2603#L1963true cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2714#L196true assume 1 != cleanup_~tmp___0~0; 2712#L196-1true havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4553#L699-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2640#L726-84true anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 4260#L2200true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 530#L2264true isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 986#L2277true cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 3344#L208true assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 445#L2092-4true __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3569#L2144-12true __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 70#L1305-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 1071#L1306-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 4644#L2109-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2894#L2130-44true __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 1005#L1310-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 3962#L1411-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 4533#L699-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2634#L726-89true stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 662#L2705-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1129#L2717-4true timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 3311#L2854-4true assume !(0 != timeShift_~tmp___9~3); 3118#L2945-12true assume 1 == ~doorState~0;~doorState~0 := 0; 3094#L2945-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 5454#L2296-8true assume !(1 == stopRequestedInDirection_~dir); 4170#L2465-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 425#L2618-8true timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1451#L2953-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 3617#L2672-12true assume !(1 == ~currentHeading~0); 1975#L2682-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1958#L2682-38true assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 1424#L2688-29true havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2510#L1436-4true assume !(-1 == ~expectedDirection~0); 3086#L1448-4true assume !(1 == ~expectedDirection~0); 1874#L1449-4true cleanup_~i~0 := 1 + cleanup_~i~0; 4868#L188-2true [2019-11-20 05:34:27,994 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:27,995 INFO L82 PathProgramCache]: Analyzing trace with hash -1459300459, now seen corresponding path program 1 times [2019-11-20 05:34:28,002 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:28,003 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [529676968] [2019-11-20 05:34:28,003 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:28,186 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:28,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:28,530 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [529676968] [2019-11-20 05:34:28,531 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:28,531 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:28,532 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2012776142] [2019-11-20 05:34:28,537 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:34:28,538 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:28,539 INFO L82 PathProgramCache]: Analyzing trace with hash -872606770, now seen corresponding path program 1 times [2019-11-20 05:34:28,539 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:28,540 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [841310512] [2019-11-20 05:34:28,540 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:28,563 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:28,658 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:28,659 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [841310512] [2019-11-20 05:34:28,659 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:28,659 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-11-20 05:34:28,659 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [832300545] [2019-11-20 05:34:28,661 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:34:28,661 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:34:28,676 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-11-20 05:34:28,676 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-11-20 05:34:28,678 INFO L87 Difference]: Start difference. First operand 5583 states. Second operand 6 states. [2019-11-20 05:34:35,824 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:34:35,824 INFO L93 Difference]: Finished difference Result 13995 states and 26350 transitions. [2019-11-20 05:34:35,825 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-11-20 05:34:35,826 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 13995 states and 26350 transitions. [2019-11-20 05:34:35,995 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3235 [2019-11-20 05:34:36,118 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 13995 states to 13925 states and 26269 transitions. [2019-11-20 05:34:36,120 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 13925 [2019-11-20 05:34:36,137 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 13925 [2019-11-20 05:34:36,138 INFO L73 IsDeterministic]: Start isDeterministic. Operand 13925 states and 26269 transitions. [2019-11-20 05:34:36,176 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:34:36,176 INFO L688 BuchiCegarLoop]: Abstraction has 13925 states and 26269 transitions. [2019-11-20 05:34:36,212 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 13925 states and 26269 transitions. [2019-11-20 05:34:36,457 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 13925 to 9243. [2019-11-20 05:34:36,458 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9243 states. [2019-11-20 05:34:36,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9243 states to 9243 states and 17452 transitions. [2019-11-20 05:34:36,488 INFO L711 BuchiCegarLoop]: Abstraction has 9243 states and 17452 transitions. [2019-11-20 05:34:36,488 INFO L591 BuchiCegarLoop]: Abstraction has 9243 states and 17452 transitions. [2019-11-20 05:34:36,488 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-11-20 05:34:36,489 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9243 states and 17452 transitions. [2019-11-20 05:34:36,531 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2073 [2019-11-20 05:34:36,531 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:36,532 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:36,542 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:36,542 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:36,543 INFO L794 eck$LassoCheckResult]: Stem: 23052#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 23053#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 24649#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 24927#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 23737#L385 assume 0 != main_~tmp~8; 23738#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 21079#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 21080#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 22695#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23759#L970 assume 0 == initPersonOnFloor_~floor; 24424#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 19895#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22477#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19681#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 19682#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20462#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19759#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 19760#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 21190#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 24553#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 21146#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 19814#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 20932#L699 assume !(0 == isFloorCalling_~floorID); 20933#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23125#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20733#L2705 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19708#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21193#L2854 assume !(0 != timeShift_~tmp___9~3); 23412#L2945 assume !(1 == ~doorState~0); 23413#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23415#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 22089#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 22090#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 19944#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20639#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 21668#L2672 assume !(1 == ~currentHeading~0); 22153#L2682 assume !(0 == ~currentFloorID~0); 22137#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21498#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21499#L1436 assume !(-1 == ~expectedDirection~0); 22661#L1448 assume !(1 == ~expectedDirection~0); 21959#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20460#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20461#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19771#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 19772#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 21491#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 19978#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 19980#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 21025#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23057#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24367#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 23040#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20742#L2705-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19699#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21195#L2854-1 assume !(0 != timeShift_~tmp___9~3); 23401#L2945-3 assume !(1 == ~doorState~0); 23402#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23407#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 24178#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28758#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 28757#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 23829#L2672-3 assume !(1 == ~currentHeading~0); 23830#L2682-9 assume !(0 == ~currentFloorID~0); 22126#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21429#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21496#L1436-1 assume !(-1 == ~expectedDirection~0); 22662#L1448-1 assume !(1 == ~expectedDirection~0); 21968#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20463#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20464#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19774#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 19775#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 21493#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 19982#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 19984#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 21029#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23067#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24369#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22784#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20738#L2705-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19710#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21194#L2854-2 assume !(0 != timeShift_~tmp___9~3); 23406#L2945-6 assume !(1 == ~doorState~0); 23389#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23390#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 25432#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 20532#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 20610#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 21675#L2672-6 assume !(1 == ~currentHeading~0); 23833#L2682-18 assume !(0 == ~currentFloorID~0); 22072#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21433#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21730#L1436-2 assume !(-1 == ~expectedDirection~0); 22664#L1448-2 assume !(1 == ~expectedDirection~0); 21925#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 22122#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 22700#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23758#L970-1 assume 0 == initPersonOnFloor_~floor; 24402#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 19870#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 22458#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 19695#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 19711#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20454#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19786#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 19787#L1306-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 20882#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 20883#L2109-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 23231#L2130-34 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 23232#L1321-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 23027#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24371#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22710#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20706#L2705-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19724#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21196#L2854-3 assume !(0 != timeShift_~tmp___9~3); 23393#L2945-9 assume !(1 == ~doorState~0); 23394#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23396#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 25433#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28629#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 28628#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 23819#L2672-9 assume !(1 == ~currentHeading~0); 23820#L2682-27 assume !(0 == ~currentFloorID~0); 22054#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 21422#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21672#L1436-3 assume !(-1 == ~expectedDirection~0); 22656#L1448-3 assume !(1 == ~expectedDirection~0); 21935#L1449-3 cleanup_~i~0 := 0; 22127#L188-2 [2019-11-20 05:34:36,545 INFO L796 eck$LassoCheckResult]: Loop: 22127#L188-2 assume !false; 25083#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 25015#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 22815#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 22816#L196 assume 1 != cleanup_~tmp___0~0; 22992#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 22993#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22870#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 22871#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 20536#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 20537#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 21119#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 20455#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 20456#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 19789#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 19790#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 28573#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 28572#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 28571#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 24430#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23038#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 24373#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 22859#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 20713#L2705-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~8;stopRequestedAtCurrentFloor_~retValue_acc~23 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 19668#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 21192#L2854-4 assume !(0 != timeShift_~tmp___9~3); 23398#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 23379#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 23380#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 25435#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 28580#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 28578#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 28579#L2672-12 assume !(1 == ~currentHeading~0); 28825#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 22203#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 21426#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 21646#L1436-4 assume !(-1 == ~expectedDirection~0); 22658#L1448-4 assume !(1 == ~expectedDirection~0); 21951#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 22127#L188-2 [2019-11-20 05:34:36,545 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:36,545 INFO L82 PathProgramCache]: Analyzing trace with hash 1518867470, now seen corresponding path program 1 times [2019-11-20 05:34:36,546 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:36,546 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1639284710] [2019-11-20 05:34:36,546 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:36,620 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:36,727 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:36,729 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1639284710] [2019-11-20 05:34:36,729 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:36,729 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:36,730 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2005837629] [2019-11-20 05:34:36,732 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:34:36,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:36,733 INFO L82 PathProgramCache]: Analyzing trace with hash 2142700463, now seen corresponding path program 1 times [2019-11-20 05:34:36,734 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:36,734 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1459824473] [2019-11-20 05:34:36,734 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:36,743 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:36,769 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:36,770 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1459824473] [2019-11-20 05:34:36,770 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:36,770 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:36,770 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1230828758] [2019-11-20 05:34:36,771 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:34:36,771 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:34:36,771 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-20 05:34:36,771 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-20 05:34:36,772 INFO L87 Difference]: Start difference. First operand 9243 states and 17452 transitions. cyclomatic complexity: 8210 Second operand 4 states. [2019-11-20 05:34:37,063 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:34:37,064 INFO L93 Difference]: Finished difference Result 16309 states and 30947 transitions. [2019-11-20 05:34:37,064 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 4 states. [2019-11-20 05:34:37,065 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 16309 states and 30947 transitions. [2019-11-20 05:34:37,162 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3721 [2019-11-20 05:34:37,259 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 16309 states to 16309 states and 30947 transitions. [2019-11-20 05:34:37,260 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 16309 [2019-11-20 05:34:37,275 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 16309 [2019-11-20 05:34:37,276 INFO L73 IsDeterministic]: Start isDeterministic. Operand 16309 states and 30947 transitions. [2019-11-20 05:34:37,299 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:34:37,299 INFO L688 BuchiCegarLoop]: Abstraction has 16309 states and 30947 transitions. [2019-11-20 05:34:37,322 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 16309 states and 30947 transitions. [2019-11-20 05:34:37,476 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 16309 to 9261. [2019-11-20 05:34:37,477 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9261 states. [2019-11-20 05:34:37,494 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9261 states to 9261 states and 17470 transitions. [2019-11-20 05:34:37,494 INFO L711 BuchiCegarLoop]: Abstraction has 9261 states and 17470 transitions. [2019-11-20 05:34:37,494 INFO L591 BuchiCegarLoop]: Abstraction has 9261 states and 17470 transitions. [2019-11-20 05:34:37,495 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-11-20 05:34:37,495 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9261 states and 17470 transitions. [2019-11-20 05:34:37,535 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2077 [2019-11-20 05:34:37,536 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:37,536 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:37,547 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:37,548 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:37,550 INFO L794 eck$LassoCheckResult]: Stem: 48574#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 48575#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 50118#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 50344#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 49255#L385 assume 0 != main_~tmp~8; 49256#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 46640#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 46641#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 48243#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 49277#L970 assume 0 == initPersonOnFloor_~floor; 49906#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 45464#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 48028#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 45254#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 45255#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 46029#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 45328#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 45329#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46745#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 50025#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 46705#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 45383#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 46494#L699 assume !(0 == isFloorCalling_~floorID); 46495#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 48644#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 46296#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46297#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 49633#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 45273#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 45275#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 50831#L2854 assume !(0 != timeShift_~tmp___9~3); 48932#L2945 assume !(1 == ~doorState~0); 48933#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 48935#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 47640#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 47641#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 45513#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 46206#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 47223#L2672 assume !(1 == ~currentHeading~0); 47706#L2682 assume !(0 == ~currentFloorID~0); 47690#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47673#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51295#L1436 assume !(-1 == ~expectedDirection~0); 51285#L1448 assume !(1 == ~expectedDirection~0); 51284#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51283#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51282#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 51280#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 51278#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 51277#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 51276#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 51270#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 51253#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 51250#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 51248#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51244#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 51243#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 51229#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51225#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 51220#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 51218#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51210#L2854-1 assume !(0 != timeShift_~tmp___9~3); 51203#L2945-3 assume !(1 == ~doorState~0); 51197#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 51179#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 51142#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51123#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51109#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 51102#L2672-3 assume !(1 == ~currentHeading~0); 50976#L2682-9 assume !(0 == ~currentFloorID~0); 47678#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47615#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51622#L1436-1 assume !(-1 == ~expectedDirection~0); 51619#L1448-1 assume !(1 == ~expectedDirection~0); 51597#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51591#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51590#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 51575#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 51572#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 51570#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 51553#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 51543#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 51535#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 50971#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 50969#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 50965#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 50963#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 50955#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 50951#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 50946#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 50944#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 50942#L2854-2 assume !(0 != timeShift_~tmp___9~3); 50941#L2945-6 assume !(1 == ~doorState~0); 50923#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 50916#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 50878#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 50877#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 50875#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 50876#L2672-6 assume !(1 == ~currentHeading~0); 50973#L2682-18 assume !(0 == ~currentFloorID~0); 47621#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47581#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 48213#L1436-2 assume !(-1 == ~expectedDirection~0); 48214#L1448-2 assume !(1 == ~expectedDirection~0); 47474#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 47674#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 48246#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 49276#L970-1 assume 0 == initPersonOnFloor_~floor; 49885#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 45439#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 48009#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 45260#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 45279#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 46021#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 45355#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 45356#L1306-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 46441#L1316-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46442#L2109-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 48750#L2130-34 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 48751#L1321-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 48549#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 49854#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 48256#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 46267#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46268#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 48704#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 45291#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 45293#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 53139#L2854-3 assume !(0 != timeShift_~tmp___9~3); 48913#L2945-9 assume !(1 == ~doorState~0); 48914#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 48915#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 50826#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51307#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51238#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 51235#L2672-9 assume !(1 == ~currentHeading~0); 51233#L2682-27 assume !(0 == ~currentFloorID~0); 47603#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 47771#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51697#L1436-3 assume !(-1 == ~expectedDirection~0); 51693#L1448-3 assume !(1 == ~expectedDirection~0); 51690#L1449-3 cleanup_~i~0 := 0; 51688#L188-2 [2019-11-20 05:34:37,551 INFO L796 eck$LassoCheckResult]: Loop: 51688#L188-2 assume !false; 51651#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 51648#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 51639#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 51637#L196 assume 1 != cleanup_~tmp___0~0; 51636#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 51605#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51593#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 51580#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 51574#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 51569#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 51547#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 51541#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 51532#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 51529#L1305-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 51523#L1306-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 51522#L1316-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 51516#L2109-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51503#L2130-45 __utac_acc__Specification3_spec__1_#t~ret23 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~0 := __utac_acc__Specification3_spec__1_#t~ret23;havoc __utac_acc__Specification3_spec__1_#t~ret23; 51496#L1321-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~0;~expectedDirection~0 := 1; 51219#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 51217#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 51143#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 51110#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 51107#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 51100#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 51098#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 51092#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 51087#L2854-4 assume !(0 != timeShift_~tmp___9~3); 51083#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 51071#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 51063#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 51030#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 51023#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 51022#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 49324#L2672-12 assume !(1 == ~currentHeading~0); 49325#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 47756#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 47746#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 51716#L1436-4 assume !(-1 == ~expectedDirection~0); 51704#L1448-4 assume !(1 == ~expectedDirection~0); 51689#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 51688#L188-2 [2019-11-20 05:34:37,551 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:37,552 INFO L82 PathProgramCache]: Analyzing trace with hash 494557243, now seen corresponding path program 1 times [2019-11-20 05:34:37,552 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:37,552 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1426429192] [2019-11-20 05:34:37,553 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:37,583 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:37,664 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:37,665 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1426429192] [2019-11-20 05:34:37,665 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:37,665 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:37,666 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [669401528] [2019-11-20 05:34:37,667 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:34:37,667 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:37,667 INFO L82 PathProgramCache]: Analyzing trace with hash -1586794052, now seen corresponding path program 1 times [2019-11-20 05:34:37,667 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:37,668 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1644034785] [2019-11-20 05:34:37,668 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:37,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:37,841 WARN L191 SmtUtils]: Spent 140.00 ms on a formula simplification that was a NOOP. DAG size: 3 [2019-11-20 05:34:37,844 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:37,844 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1644034785] [2019-11-20 05:34:37,844 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:37,844 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 05:34:37,845 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2073083093] [2019-11-20 05:34:37,845 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:34:37,845 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:34:37,845 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 05:34:37,845 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 05:34:37,846 INFO L87 Difference]: Start difference. First operand 9261 states and 17470 transitions. cyclomatic complexity: 8210 Second operand 3 states. [2019-11-20 05:34:38,599 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:34:38,599 INFO L93 Difference]: Finished difference Result 18012 states and 33918 transitions. [2019-11-20 05:34:38,599 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 05:34:38,600 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 18012 states and 33918 transitions. [2019-11-20 05:34:38,692 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4058 [2019-11-20 05:34:38,762 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 18012 states to 18012 states and 33918 transitions. [2019-11-20 05:34:38,762 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 18012 [2019-11-20 05:34:38,778 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 18012 [2019-11-20 05:34:38,779 INFO L73 IsDeterministic]: Start isDeterministic. Operand 18012 states and 33918 transitions. [2019-11-20 05:34:38,795 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:34:38,795 INFO L688 BuchiCegarLoop]: Abstraction has 18012 states and 33918 transitions. [2019-11-20 05:34:38,820 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 18012 states and 33918 transitions. [2019-11-20 05:34:38,975 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 18012 to 9219. [2019-11-20 05:34:38,976 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 9219 states. [2019-11-20 05:34:38,993 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 9219 states to 9219 states and 17358 transitions. [2019-11-20 05:34:38,993 INFO L711 BuchiCegarLoop]: Abstraction has 9219 states and 17358 transitions. [2019-11-20 05:34:38,994 INFO L591 BuchiCegarLoop]: Abstraction has 9219 states and 17358 transitions. [2019-11-20 05:34:38,994 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-11-20 05:34:38,995 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 9219 states and 17358 transitions. [2019-11-20 05:34:39,030 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2068 [2019-11-20 05:34:39,031 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:39,031 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:39,034 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:39,035 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:39,035 INFO L794 eck$LassoCheckResult]: Stem: 75881#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 75882#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 77423#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 77682#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 76568#L385 assume 0 != main_~tmp~8; 76569#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 73936#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 73937#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75548#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76590#L970 assume 0 == initPersonOnFloor_~floor; 77212#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72746#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 75333#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 72532#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 72533#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 73316#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72610#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 72611#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 74044#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 77329#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 74000#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 72665#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 73789#L699 assume !(0 == isFloorCalling_~floorID); 73790#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75954#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73587#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73588#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 76940#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72554#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 72556#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 78170#L2854 assume !(0 != timeShift_~tmp___9~3); 76245#L2945 assume !(1 == ~doorState~0); 76246#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76248#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 74944#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 74945#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 72795#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 73497#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 74523#L2672 assume !(1 == ~currentHeading~0); 75010#L2682 assume !(0 == ~currentFloorID~0); 74994#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74976#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 78362#L1436 assume !(-1 == ~expectedDirection~0); 78358#L1448 assume !(1 == ~expectedDirection~0); 78357#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 78355#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 78343#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 78311#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 78312#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 78356#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 78344#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 78321#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 78305#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 78292#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 78290#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 78285#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 78284#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 77600#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 76880#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 72544#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 72546#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 79511#L2854-1 assume !(0 != timeShift_~tmp___9~3); 76235#L2945-3 assume !(1 == ~doorState~0); 76236#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 76240#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 76980#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 73420#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 73464#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 74534#L2672-3 assume !(1 == ~currentHeading~0); 78268#L2682-9 assume !(0 == ~currentFloorID~0); 74982#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74284#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 74350#L1436-1 assume !(-1 == ~expectedDirection~0); 75519#L1448-1 assume !(1 == ~expectedDirection~0); 74821#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 73317#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 73318#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72625#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 72626#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 74347#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 72833#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 72835#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 73884#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 75895#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77159#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75631#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73592#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73594#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 78432#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 78427#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 78426#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 78424#L2854-2 assume !(0 != timeShift_~tmp___9~3); 78423#L2945-6 assume !(1 == ~doorState~0); 78404#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 78395#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 78376#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 78375#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 78370#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 78369#L2672-6 assume !(1 == ~currentHeading~0); 78172#L2682-18 assume !(0 == ~currentFloorID~0); 74928#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74888#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 79565#L1436-2 assume !(-1 == ~expectedDirection~0); 79562#L1448-2 assume !(1 == ~expectedDirection~0); 79561#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 79559#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 79554#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 79553#L970-1 assume 0 == initPersonOnFloor_~floor; 79525#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 75958#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 75312#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 72538#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 73306#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 73307#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 72634#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 72636#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 74570#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 72813#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 72815#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 73861#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 75854#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77162#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75563#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73559#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73561#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 79393#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 79392#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 79391#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 79390#L2854-3 assume !(0 != timeShift_~tmp___9~3); 79389#L2945-9 assume !(1 == ~doorState~0); 79388#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 79382#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 79317#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 79308#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 79306#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 79305#L2672-9 assume !(1 == ~currentHeading~0); 79304#L2682-27 assume !(0 == ~currentFloorID~0); 74910#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 74520#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 74521#L1436-3 assume !(-1 == ~expectedDirection~0); 80286#L1448-3 assume !(1 == ~expectedDirection~0); 74983#L1449-3 cleanup_~i~0 := 0; 74984#L188-2 [2019-11-20 05:34:39,036 INFO L796 eck$LassoCheckResult]: Loop: 74984#L188-2 assume !false; 77826#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 77761#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 75659#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 75660#L196 assume 1 != cleanup_~tmp___0~0; 75822#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 75823#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75709#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 75710#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 73392#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 73393#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 73974#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 79001#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 78655#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 78644#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 74571#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 74573#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 72816#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 72818#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 73865#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 75864#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 77163#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 75700#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 73564#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 73566#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 78597#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 78596#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 78595#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 78585#L2854-4 assume !(0 != timeShift_~tmp___9~3); 78578#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 78575#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 78574#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 78532#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 78525#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 78524#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 76643#L2672-12 assume !(1 == ~currentHeading~0); 76644#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 75060#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 74281#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 75514#L1436-4 assume !(-1 == ~expectedDirection~0); 75515#L1448-4 assume !(1 == ~expectedDirection~0); 74802#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 74984#L188-2 [2019-11-20 05:34:39,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:39,037 INFO L82 PathProgramCache]: Analyzing trace with hash -1564360061, now seen corresponding path program 1 times [2019-11-20 05:34:39,037 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:39,037 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [916509259] [2019-11-20 05:34:39,037 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:39,061 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:39,121 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:39,121 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [916509259] [2019-11-20 05:34:39,122 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:39,122 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:39,122 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1409476021] [2019-11-20 05:34:39,122 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:34:39,123 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:39,123 INFO L82 PathProgramCache]: Analyzing trace with hash 649255940, now seen corresponding path program 1 times [2019-11-20 05:34:39,123 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:39,123 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [785905761] [2019-11-20 05:34:39,123 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:39,129 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:39,176 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:39,177 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [785905761] [2019-11-20 05:34:39,177 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:39,177 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-20 05:34:39,177 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1707538346] [2019-11-20 05:34:39,177 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:34:39,178 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:34:39,178 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-20 05:34:39,178 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-11-20 05:34:39,178 INFO L87 Difference]: Start difference. First operand 9219 states and 17358 transitions. cyclomatic complexity: 8140 Second operand 7 states. [2019-11-20 05:34:42,860 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:34:42,860 INFO L93 Difference]: Finished difference Result 56694 states and 107254 transitions. [2019-11-20 05:34:42,860 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2019-11-20 05:34:42,861 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 56694 states and 107254 transitions. [2019-11-20 05:34:43,111 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20476 [2019-11-20 05:34:43,345 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 56694 states to 56694 states and 107254 transitions. [2019-11-20 05:34:43,345 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 56694 [2019-11-20 05:34:43,394 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 56694 [2019-11-20 05:34:43,394 INFO L73 IsDeterministic]: Start isDeterministic. Operand 56694 states and 107254 transitions. [2019-11-20 05:34:43,431 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:34:43,432 INFO L688 BuchiCegarLoop]: Abstraction has 56694 states and 107254 transitions. [2019-11-20 05:34:43,472 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 56694 states and 107254 transitions. [2019-11-20 05:34:43,803 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 56694 to 18399. [2019-11-20 05:34:43,803 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 18399 states. [2019-11-20 05:34:43,835 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 18399 states to 18399 states and 34633 transitions. [2019-11-20 05:34:43,835 INFO L711 BuchiCegarLoop]: Abstraction has 18399 states and 34633 transitions. [2019-11-20 05:34:43,839 INFO L591 BuchiCegarLoop]: Abstraction has 18399 states and 34633 transitions. [2019-11-20 05:34:43,840 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-11-20 05:34:43,840 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 18399 states and 34633 transitions. [2019-11-20 05:34:43,896 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4146 [2019-11-20 05:34:43,896 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:43,897 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:43,900 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:43,900 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:43,900 INFO L794 eck$LassoCheckResult]: Stem: 142027#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 142028#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 143854#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 144229#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 142838#L385 assume 0 != main_~tmp~8; 142839#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 139941#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 139942#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 141647#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 142867#L970 assume 0 == initPersonOnFloor_~floor; 143605#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 138712#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 141414#L762 assume !(0 == callOnFloor_~floorID); 141285#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 138565#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 145351#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 145350#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 145349#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 145348#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145342#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145341#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 140009#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138631#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 139779#L699 assume !(0 == isFloorCalling_~floorID); 139780#L703 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 142126#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 139576#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 139577#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 143291#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 138519#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 138521#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 144799#L2854 assume !(0 != timeShift_~tmp___9~3); 142446#L2945 assume !(1 == ~doorState~0); 142447#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 145282#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 141005#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 141006#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 145271#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 145269#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 145270#L2672 assume !(1 == ~currentHeading~0); 145442#L2682 assume !(0 == ~currentFloorID~0); 145196#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145195#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 145193#L1436 assume !(-1 == ~expectedDirection~0); 145189#L1448 assume !(1 == ~expectedDirection~0); 145157#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 145156#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 145155#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 145152#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145150#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 145147#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 145145#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 145128#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 145120#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 145115#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 145113#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 145109#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 145108#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145106#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145102#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 145101#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 145100#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 145099#L2854-1 assume !(0 != timeShift_~tmp___9~3); 145097#L2945-3 assume !(1 == ~doorState~0); 145094#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 145092#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 145057#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 145040#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 145038#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 145039#L2672-3 assume !(1 == ~currentHeading~0); 145447#L2682-9 assume !(0 == ~currentFloorID~0); 141048#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145836#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 145829#L1436-1 assume !(-1 == ~expectedDirection~0); 145806#L1448-1 assume !(1 == ~expectedDirection~0); 145759#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 145752#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 145750#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 145742#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 145733#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 145728#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 145724#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 145714#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 145689#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 145556#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 144951#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 141739#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 141740#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 144043#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 142221#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 138524#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 138526#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 145529#L2854-2 assume !(0 != timeShift_~tmp___9~3); 142440#L2945-6 assume !(1 == ~doorState~0); 142423#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 142424#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 144782#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 144877#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 144875#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 144876#L2672-6 assume !(1 == ~currentHeading~0); 145449#L2682-18 assume !(0 == ~currentFloorID~0); 140986#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 145837#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 145833#L1436-2 assume !(-1 == ~expectedDirection~0); 145826#L1448-2 assume !(1 == ~expectedDirection~0); 145825#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 145823#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 145818#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 145814#L970-1 assume 0 == initPersonOnFloor_~floor; 145781#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 145774#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 145772#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 145773#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 149293#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 149292#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 149290#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 149289#L1306-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140059#L2109-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 142232#L2130-33 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 139999#L1310-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138598#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 144177#L699-63 assume !(0 == isFloorCalling_~floorID); 144178#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 145540#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 145541#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 145536#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 145531#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 145527#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 145524#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 145522#L2854-3 assume !(0 != timeShift_~tmp___9~3); 142427#L2945-9 assume !(1 == ~doorState~0); 142428#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 142430#L2296-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 144785#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 144588#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 138755#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 139252#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 140573#L2672-9 assume !(1 == ~currentHeading~0); 140967#L2682-27 assume !(0 == ~currentFloorID~0); 140968#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 151087#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 151085#L1436-3 assume !(-1 == ~expectedDirection~0); 151082#L1448-3 assume !(1 == ~expectedDirection~0); 151080#L1449-3 cleanup_~i~0 := 0; 151078#L188-2 [2019-11-20 05:34:43,902 INFO L796 eck$LassoCheckResult]: Loop: 151078#L188-2 assume !false; 151077#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 151076#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 151075#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 151074#L196 assume 1 != cleanup_~tmp___0~0; 151069#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 151067#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 151068#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 151031#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 151026#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 151025#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 151024#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 151023#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 151022#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 151019#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 151015#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 151011#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 150997#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 150987#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 150979#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 150976#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 144132#L699-89 assume !(0 == isFloorCalling_~floorID); 144133#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 155959#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 155958#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 155956#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 155947#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 155946#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 155945#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 155943#L2854-4 assume !(0 != timeShift_~tmp___9~3); 155942#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 155925#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 155920#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 155906#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 155903#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 155901#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 155902#L2672-12 assume !(1 == ~currentHeading~0); 150772#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 141160#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 155841#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 152866#L1436-4 assume !(-1 == ~expectedDirection~0); 152863#L1448-4 assume !(1 == ~expectedDirection~0); 151079#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 151078#L188-2 [2019-11-20 05:34:43,902 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:43,902 INFO L82 PathProgramCache]: Analyzing trace with hash -467652938, now seen corresponding path program 1 times [2019-11-20 05:34:43,903 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:43,903 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [311378075] [2019-11-20 05:34:43,903 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:43,923 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:43,982 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:43,983 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [311378075] [2019-11-20 05:34:43,983 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:43,983 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:43,983 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [770706081] [2019-11-20 05:34:43,984 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:34:43,984 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:43,984 INFO L82 PathProgramCache]: Analyzing trace with hash -280811435, now seen corresponding path program 1 times [2019-11-20 05:34:43,984 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:43,985 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [246774928] [2019-11-20 05:34:43,985 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:43,991 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:44,063 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:44,063 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [246774928] [2019-11-20 05:34:44,063 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:44,063 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-20 05:34:44,064 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [163671775] [2019-11-20 05:34:44,064 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:34:44,064 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:34:44,064 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-20 05:34:44,064 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-11-20 05:34:44,065 INFO L87 Difference]: Start difference. First operand 18399 states and 34633 transitions. cyclomatic complexity: 16235 Second operand 7 states. [2019-11-20 05:34:51,290 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:34:51,291 INFO L93 Difference]: Finished difference Result 39195 states and 73151 transitions. [2019-11-20 05:34:51,292 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-11-20 05:34:51,292 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 39195 states and 73151 transitions. [2019-11-20 05:34:51,431 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9426 [2019-11-20 05:34:51,561 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 39195 states to 39195 states and 73151 transitions. [2019-11-20 05:34:51,562 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 39195 [2019-11-20 05:34:51,592 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 39195 [2019-11-20 05:34:51,592 INFO L73 IsDeterministic]: Start isDeterministic. Operand 39195 states and 73151 transitions. [2019-11-20 05:34:51,621 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:34:51,621 INFO L688 BuchiCegarLoop]: Abstraction has 39195 states and 73151 transitions. [2019-11-20 05:34:51,649 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 39195 states and 73151 transitions. [2019-11-20 05:34:52,582 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 39195 to 25047. [2019-11-20 05:34:52,583 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 25047 states. [2019-11-20 05:34:52,636 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 25047 states to 25047 states and 46973 transitions. [2019-11-20 05:34:52,636 INFO L711 BuchiCegarLoop]: Abstraction has 25047 states and 46973 transitions. [2019-11-20 05:34:52,637 INFO L591 BuchiCegarLoop]: Abstraction has 25047 states and 46973 transitions. [2019-11-20 05:34:52,637 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-11-20 05:34:52,637 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 25047 states and 46973 transitions. [2019-11-20 05:34:52,709 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5918 [2019-11-20 05:34:52,709 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:34:52,709 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:34:52,713 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:52,713 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:34:52,714 INFO L794 eck$LassoCheckResult]: Stem: 199633#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 199634#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 201505#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 201926#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 200444#L385 assume 0 != main_~tmp~8; 200445#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 197559#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 197560#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 199276#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 200471#L970 assume 0 == initPersonOnFloor_~floor; 201247#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 196338#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 199038#L762 assume !(0 == callOnFloor_~floorID); 198909#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 196120#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 196121#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 196913#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 196202#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 196203#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 197684#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 201390#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 197627#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 196257#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 197404#L699 assume !(0 == isFloorCalling_~floorID); 197405#L703 assume !(1 == isFloorCalling_~floorID); 201450#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 199730#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 197203#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 197204#L2109-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 200900#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 196147#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 196149#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 202495#L2854 assume !(0 != timeShift_~tmp___9~3); 200049#L2945 assume !(1 == ~doorState~0); 200050#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 200052#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 200941#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 202308#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196387#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 197106#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 198180#L2672 assume !(1 == ~currentHeading~0); 198703#L2682 assume !(0 == ~currentFloorID~0); 198704#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 202568#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 202566#L1436 assume !(-1 == ~expectedDirection~0); 202562#L1448 assume !(1 == ~expectedDirection~0); 202561#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 202560#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 202559#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 202557#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 202554#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 202550#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 202536#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 202527#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 202518#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 202513#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 202509#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 202510#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 204222#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 204223#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 204225#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 204224#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 204221#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 204217#L2854-1 assume !(0 != timeShift_~tmp___9~3); 204218#L2945-3 assume !(1 == ~doorState~0); 205396#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 205386#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 205380#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 205361#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 205357#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 205358#L2672-3 assume !(1 == ~currentHeading~0); 205433#L2682-9 assume !(0 == ~currentFloorID~0); 202915#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 202913#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 202910#L1436-1 assume !(-1 == ~expectedDirection~0); 202907#L1448-1 assume !(1 == ~expectedDirection~0); 202906#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 202905#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 202904#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 202901#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 202898#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 202894#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 202882#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 202873#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 202866#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 202859#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 202855#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 202856#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 207665#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 207666#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 207668#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 207667#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 207664#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 207651#L2854-2 assume !(0 != timeShift_~tmp___9~3); 207652#L2945-6 assume !(1 == ~doorState~0); 209251#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 209246#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 209227#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 209225#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 209222#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 209223#L2672-6 assume !(1 == ~currentHeading~0); 210821#L2682-18 assume !(0 == ~currentFloorID~0); 198615#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 206397#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 206394#L1436-2 assume !(-1 == ~expectedDirection~0); 206391#L1448-2 assume !(1 == ~expectedDirection~0); 206390#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 206388#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 206383#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 206382#L970-1 assume 0 == initPersonOnFloor_~floor; 206354#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 206347#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 206345#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 206346#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 214055#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 214054#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 214052#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 213973#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 198229#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 215137#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 215131#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 215128#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 206294#L699-63 assume !(0 == isFloorCalling_~floorID); 206295#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 215120#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 215117#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 215118#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 215119#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 215116#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 215114#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 215113#L2854-3 assume !(0 != timeShift_~tmp___9~3); 200030#L2945-9 assume !(1 == ~doorState~0); 200031#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 200033#L2296-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 198598#L1273-15 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 198599#L2300-6 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196381#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196877#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 198196#L2672-9 assume !(1 == ~currentHeading~0); 220900#L2682-27 assume !(0 == ~currentFloorID~0); 198792#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 198775#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 214286#L1436-3 assume !(-1 == ~expectedDirection~0); 214280#L1448-3 assume !(1 == ~expectedDirection~0); 214275#L1449-3 cleanup_~i~0 := 0; 214273#L188-2 [2019-11-20 05:34:52,715 INFO L796 eck$LassoCheckResult]: Loop: 214273#L188-2 assume !false; 214272#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 214271#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 214270#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 214265#L196 assume 1 != cleanup_~tmp___0~0; 214190#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 214185#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 214183#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 214148#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 213902#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 214142#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 214140#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 214138#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 214136#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 214133#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 214098#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 198231#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 201116#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 210876#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 210877#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 210828#L699-89 assume !(0 == isFloorCalling_~floorID); 210829#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 216391#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 216388#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 216389#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 216392#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 216390#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 216387#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 216385#L2854-4 assume !(0 != timeShift_~tmp___9~3); 200035#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 200009#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 200010#L2296-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 198802#L1273-20 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 198803#L2300-8 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 196658#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 196881#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 200550#L2672-12 assume !(1 == ~currentHeading~0); 200551#L2682-36 assume !(0 == ~currentFloorID~0); 198759#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 198749#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 214283#L1436-4 assume !(-1 == ~expectedDirection~0); 214277#L1448-4 assume !(1 == ~expectedDirection~0); 214274#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 214273#L188-2 [2019-11-20 05:34:52,715 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:52,716 INFO L82 PathProgramCache]: Analyzing trace with hash -1046251052, now seen corresponding path program 1 times [2019-11-20 05:34:52,716 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:52,717 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1001765055] [2019-11-20 05:34:52,717 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:52,741 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:52,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:52,800 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1001765055] [2019-11-20 05:34:52,800 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:52,800 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:34:52,801 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2065558756] [2019-11-20 05:34:52,801 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:34:52,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:34:52,802 INFO L82 PathProgramCache]: Analyzing trace with hash -168805024, now seen corresponding path program 1 times [2019-11-20 05:34:52,802 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:34:52,802 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2031297570] [2019-11-20 05:34:52,802 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:34:52,810 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:34:52,849 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:34:52,850 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2031297570] [2019-11-20 05:34:52,850 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:34:52,850 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 05:34:52,850 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1893810838] [2019-11-20 05:34:52,851 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:34:52,851 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:34:52,851 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 05:34:52,851 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 05:34:52,852 INFO L87 Difference]: Start difference. First operand 25047 states and 46973 transitions. cyclomatic complexity: 21927 Second operand 5 states. [2019-11-20 05:35:00,322 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:00,322 INFO L93 Difference]: Finished difference Result 59539 states and 111823 transitions. [2019-11-20 05:35:00,323 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-20 05:35:00,323 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 59539 states and 111823 transitions. [2019-11-20 05:35:00,526 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15292 [2019-11-20 05:35:00,681 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 59539 states to 59539 states and 111823 transitions. [2019-11-20 05:35:00,681 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 59539 [2019-11-20 05:35:00,724 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 59539 [2019-11-20 05:35:00,725 INFO L73 IsDeterministic]: Start isDeterministic. Operand 59539 states and 111823 transitions. [2019-11-20 05:35:00,758 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:00,758 INFO L688 BuchiCegarLoop]: Abstraction has 59539 states and 111823 transitions. [2019-11-20 05:35:00,795 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 59539 states and 111823 transitions. [2019-11-20 05:35:01,170 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 59539 to 24475. [2019-11-20 05:35:01,171 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24475 states. [2019-11-20 05:35:01,221 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24475 states to 24475 states and 45839 transitions. [2019-11-20 05:35:01,221 INFO L711 BuchiCegarLoop]: Abstraction has 24475 states and 45839 transitions. [2019-11-20 05:35:01,222 INFO L591 BuchiCegarLoop]: Abstraction has 24475 states and 45839 transitions. [2019-11-20 05:35:01,222 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-11-20 05:35:01,222 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24475 states and 45839 transitions. [2019-11-20 05:35:01,280 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5775 [2019-11-20 05:35:01,281 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:01,281 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:01,284 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:01,284 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:01,285 INFO L794 eck$LassoCheckResult]: Stem: 284151#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 284152#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 285812#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 286127#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 284890#L385 assume 0 != main_~tmp~8; 284891#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 282145#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 282146#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 283810#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 284914#L970 assume 0 == initPersonOnFloor_~floor; 285581#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 280947#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 283583#L762 assume !(0 == callOnFloor_~floorID); 283459#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 280733#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 280734#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 284983#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 284984#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 282256#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 282257#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 286208#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 282212#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 280866#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 282000#L699 assume !(0 == isFloorCalling_~floorID); 282001#L703 assume !(1 == isFloorCalling_~floorID); 285759#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 285760#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 281797#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 281798#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 285971#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 285293#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 280755#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 280757#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 286673#L2854 assume !(0 != timeShift_~tmp___9~3); 284548#L2945 assume !(1 == ~doorState~0); 284549#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 284551#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 285329#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 286498#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 280996#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 281701#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 282744#L2672 assume !(1 == ~currentHeading~0); 285014#L2682 assume !(0 == ~currentFloorID~0); 283235#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 283215#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 287008#L1436 assume !(-1 == ~expectedDirection~0); 287004#L1448 assume !(1 == ~expectedDirection~0); 287003#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 287002#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 287001#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 286998#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 286993#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 286989#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 286978#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 286969#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 286961#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 286958#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 286956#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 286955#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 286953#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 286950#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 286951#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 293292#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 293291#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 293289#L2854-1 assume !(0 != timeShift_~tmp___9~3); 293290#L2945-3 assume !(1 == ~doorState~0); 305011#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 285334#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 285335#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 281664#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 281665#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 282755#L2672-3 assume !(1 == ~currentHeading~0); 285003#L2682-9 assume !(0 == ~currentFloorID~0); 283223#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 292005#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 291995#L1436-1 assume !(-1 == ~expectedDirection~0); 291996#L1448-1 assume !(1 == ~expectedDirection~0); 291989#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 291990#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 291844#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 291845#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 298647#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 291985#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 291843#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 291838#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 291802#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 291799#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 291798#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 291797#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 291789#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 291790#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 291792#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 291791#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 291788#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 291776#L2854-2 assume !(0 != timeShift_~tmp___9~3); 284541#L2945-6 assume !(1 == ~doorState~0); 284542#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 286658#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 286659#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 304834#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 304832#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 285007#L2672-6 assume !(1 == ~currentHeading~0); 285008#L2682-18 assume !(0 == ~currentFloorID~0); 283161#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 290383#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 290380#L1436-2 assume !(-1 == ~expectedDirection~0); 290377#L1448-2 assume !(1 == ~expectedDirection~0); 290376#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 290374#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 290369#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 290367#L970-1 assume 0 == initPersonOnFloor_~floor; 290368#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 290324#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 290325#L762-2 assume !(0 == callOnFloor_~floorID); 297023#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 290315#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 290316#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 290310#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 290311#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 300886#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 291982#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 290358#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 290041#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 290016#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 289793#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 289792#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 289791#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 289783#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 289784#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 289786#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 289785#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 289782#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 289778#L2854-3 assume !(0 != timeShift_~tmp___9~3); 289779#L2945-9 assume !(1 == ~doorState~0); 304753#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 286661#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 286662#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 281483#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 281484#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 282759#L2672-9 assume !(1 == ~currentHeading~0); 304886#L2682-27 assume !(0 == ~currentFloorID~0); 287194#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 287172#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 287164#L1436-3 assume !(-1 == ~expectedDirection~0); 287163#L1448-3 assume !(1 == ~expectedDirection~0); 287145#L1449-3 cleanup_~i~0 := 0; 287144#L188-2 [2019-11-20 05:35:01,286 INFO L796 eck$LassoCheckResult]: Loop: 287144#L188-2 assume !false; 287139#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 287140#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 287135#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 287136#L196 assume 1 != cleanup_~tmp___0~0; 287129#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 287130#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 287108#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 287109#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 287075#L2204 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 287070#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 287065#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 287066#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 287061#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 287062#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 287057#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 287058#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 287052#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 287051#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 287050#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 287020#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 287017#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 287016#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 287015#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 287013#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 287010#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 287011#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 288620#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 288619#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 288618#L2854-4 assume !(0 != timeShift_~tmp___9~3); 284533#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 284510#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 284511#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 286666#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 304894#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 304892#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 304891#L2672-12 assume !(1 == ~currentHeading~0); 304890#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 283333#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 287173#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 287158#L1436-4 assume !(-1 == ~expectedDirection~0); 287157#L1448-4 assume !(1 == ~expectedDirection~0); 287143#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 287144#L188-2 [2019-11-20 05:35:01,286 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:01,287 INFO L82 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 1 times [2019-11-20 05:35:01,287 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:01,287 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [297046498] [2019-11-20 05:35:01,287 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:01,310 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:01,372 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:01,373 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [297046498] [2019-11-20 05:35:01,373 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:01,373 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:01,374 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [584975991] [2019-11-20 05:35:01,374 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:01,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:01,375 INFO L82 PathProgramCache]: Analyzing trace with hash 1402930893, now seen corresponding path program 1 times [2019-11-20 05:35:01,375 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:01,375 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1878097950] [2019-11-20 05:35:01,376 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:01,383 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:01,417 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:01,417 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1878097950] [2019-11-20 05:35:01,417 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:01,417 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 05:35:01,418 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1354694408] [2019-11-20 05:35:01,418 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:01,418 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:01,418 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 05:35:01,419 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 05:35:01,419 INFO L87 Difference]: Start difference. First operand 24475 states and 45839 transitions. cyclomatic complexity: 21365 Second operand 5 states. [2019-11-20 05:35:04,250 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:04,252 INFO L93 Difference]: Finished difference Result 109521 states and 206920 transitions. [2019-11-20 05:35:04,256 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-11-20 05:35:04,256 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 109521 states and 206920 transitions. [2019-11-20 05:35:04,704 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 28056 [2019-11-20 05:35:06,129 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 109521 states to 109521 states and 206920 transitions. [2019-11-20 05:35:06,129 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 109521 [2019-11-20 05:35:06,183 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 109521 [2019-11-20 05:35:06,183 INFO L73 IsDeterministic]: Start isDeterministic. Operand 109521 states and 206920 transitions. [2019-11-20 05:35:06,220 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:06,220 INFO L688 BuchiCegarLoop]: Abstraction has 109521 states and 206920 transitions. [2019-11-20 05:35:06,276 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 109521 states and 206920 transitions. [2019-11-20 05:35:06,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 109521 to 47835. [2019-11-20 05:35:06,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47835 states. [2019-11-20 05:35:06,859 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47835 states to 47835 states and 89639 transitions. [2019-11-20 05:35:06,860 INFO L711 BuchiCegarLoop]: Abstraction has 47835 states and 89639 transitions. [2019-11-20 05:35:06,860 INFO L591 BuchiCegarLoop]: Abstraction has 47835 states and 89639 transitions. [2019-11-20 05:35:06,860 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-11-20 05:35:06,860 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47835 states and 89639 transitions. [2019-11-20 05:35:06,975 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11296 [2019-11-20 05:35:06,976 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:06,976 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:06,978 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:06,978 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:06,979 INFO L794 eck$LassoCheckResult]: Stem: 418230#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 418231#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 420064#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 420438#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 419065#L385 assume 0 != main_~tmp~8; 419066#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 416179#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 416180#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 417853#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 419092#L970 assume 0 == initPersonOnFloor_~floor; 419828#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 414962#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 417620#L762 assume !(0 == callOnFloor_~floorID); 417490#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 414815#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 422252#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 422251#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 422249#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 422247#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 422248#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422262#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 416249#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 414881#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 416014#L699 assume !(0 == isFloorCalling_~floorID); 416015#L703 assume !(1 == isFloorCalling_~floorID); 420015#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 418340#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 415812#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 415814#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 420309#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 422068#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 422067#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 422066#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 422065#L2854 assume !(0 != timeShift_~tmp___9~3); 422064#L2945 assume !(1 == ~doorState~0); 422063#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 422061#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 422062#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 420822#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 415011#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 421961#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 421959#L2672 assume !(1 == ~currentHeading~0); 421956#L2682 assume !(0 == ~currentFloorID~0); 421950#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 421949#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 421947#L1436 assume !(-1 == ~expectedDirection~0); 421943#L1448 assume !(1 == ~expectedDirection~0); 421942#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 421941#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 421939#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 421937#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 421931#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 421928#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 421926#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 421923#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 421916#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 421913#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 421910#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 421909#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 421908#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 421765#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 421760#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 421758#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 421757#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 421755#L2854-1 assume !(0 != timeShift_~tmp___9~3); 421754#L2945-3 assume !(1 == ~doorState~0); 421752#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 421748#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 421624#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 421602#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 421594#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 421587#L2672-3 assume !(1 == ~currentHeading~0); 421578#L2682-9 assume !(0 == ~currentFloorID~0); 421566#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 421565#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 430431#L1436-1 assume !(-1 == ~expectedDirection~0); 430428#L1448-1 assume !(1 == ~expectedDirection~0); 430427#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430426#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 430425#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 430423#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430422#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 421269#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 421262#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 421250#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 421207#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 421192#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 421190#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 421187#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 421128#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 421126#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 421122#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 421120#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 421119#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 421117#L2854-2 assume !(0 != timeShift_~tmp___9~3); 421116#L2945-6 assume !(1 == ~doorState~0); 421115#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 421113#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 421090#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 421091#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 427872#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 427873#L2672-6 assume !(1 == ~currentHeading~0); 428645#L2682-18 assume !(0 == ~currentFloorID~0); 430127#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 430125#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 430122#L1436-2 assume !(-1 == ~expectedDirection~0); 430119#L1448-2 assume !(1 == ~expectedDirection~0); 430118#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 430114#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 430109#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 430107#L970-1 assume 0 == initPersonOnFloor_~floor; 430082#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 430075#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 430073#L762-2 assume !(0 == callOnFloor_~floorID); 430070#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 430068#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 430067#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 430066#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 430064#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 430063#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 429377#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 429244#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 429201#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 429193#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 429172#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 429170#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 429169#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 429094#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 429093#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 429088#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 429086#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 429085#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 429083#L2854-3 assume !(0 != timeShift_~tmp___9~3); 429058#L2945-9 assume !(1 == ~doorState~0); 429055#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 429023#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 428999#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 428972#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 428970#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 428971#L2672-9 assume !(1 == ~currentHeading~0); 429246#L2682-27 assume !(0 == ~currentFloorID~0); 429247#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 448344#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 448341#L1436-3 assume !(-1 == ~expectedDirection~0); 448335#L1448-3 assume !(1 == ~expectedDirection~0); 448330#L1449-3 cleanup_~i~0 := 0; 448328#L188-2 [2019-11-20 05:35:06,979 INFO L796 eck$LassoCheckResult]: Loop: 448328#L188-2 assume !false; 448327#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 448326#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 448325#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 448324#L196 assume 1 != cleanup_~tmp___0~0; 448321#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 448318#L699-84 assume !(0 == isFloorCalling_~floorID); 448314#L703-84 assume !(1 == isFloorCalling_~floorID); 448300#L707-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 448293#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 448283#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 448278#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 448277#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 448276#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 448275#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 448274#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 448272#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 448271#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 428577#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 428569#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 428560#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 428524#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 428413#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 428411#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 428410#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 428409#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 428408#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 428403#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 428402#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 428401#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 428400#L2854-4 assume !(0 != timeShift_~tmp___9~3); 428399#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 428398#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 428396#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 428385#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 428386#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 428688#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 428689#L2672-12 assume !(1 == ~currentHeading~0); 428653#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 428654#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 448343#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 448338#L1436-4 assume !(-1 == ~expectedDirection~0); 448332#L1448-4 assume !(1 == ~expectedDirection~0); 448329#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 448328#L188-2 [2019-11-20 05:35:06,979 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:06,980 INFO L82 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 2 times [2019-11-20 05:35:06,980 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:06,980 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [235332397] [2019-11-20 05:35:06,980 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:07,004 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:07,061 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:07,062 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [235332397] [2019-11-20 05:35:07,062 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:07,062 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:07,063 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1326486770] [2019-11-20 05:35:07,063 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:07,063 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:07,064 INFO L82 PathProgramCache]: Analyzing trace with hash 1643176351, now seen corresponding path program 1 times [2019-11-20 05:35:07,064 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:07,064 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [800788730] [2019-11-20 05:35:07,064 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:07,070 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:07,079 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:07,079 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [800788730] [2019-11-20 05:35:07,079 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:07,079 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 05:35:07,079 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1705474257] [2019-11-20 05:35:07,080 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:07,080 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:07,080 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 05:35:07,080 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 05:35:07,080 INFO L87 Difference]: Start difference. First operand 47835 states and 89639 transitions. cyclomatic complexity: 41805 Second operand 3 states. [2019-11-20 05:35:08,639 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:08,639 INFO L93 Difference]: Finished difference Result 52279 states and 97631 transitions. [2019-11-20 05:35:08,639 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 05:35:08,639 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 52279 states and 97631 transitions. [2019-11-20 05:35:08,835 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11670 [2019-11-20 05:35:09,014 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 52279 states to 52279 states and 97631 transitions. [2019-11-20 05:35:09,014 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 52279 [2019-11-20 05:35:09,050 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 52279 [2019-11-20 05:35:09,050 INFO L73 IsDeterministic]: Start isDeterministic. Operand 52279 states and 97631 transitions. [2019-11-20 05:35:09,074 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:09,074 INFO L688 BuchiCegarLoop]: Abstraction has 52279 states and 97631 transitions. [2019-11-20 05:35:09,103 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 52279 states and 97631 transitions. [2019-11-20 05:35:09,414 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 52279 to 47299. [2019-11-20 05:35:09,414 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47299 states. [2019-11-20 05:35:09,482 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47299 states to 47299 states and 88631 transitions. [2019-11-20 05:35:09,482 INFO L711 BuchiCegarLoop]: Abstraction has 47299 states and 88631 transitions. [2019-11-20 05:35:09,482 INFO L591 BuchiCegarLoop]: Abstraction has 47299 states and 88631 transitions. [2019-11-20 05:35:09,482 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-11-20 05:35:09,482 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47299 states and 88631 transitions. [2019-11-20 05:35:09,593 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11000 [2019-11-20 05:35:09,593 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:09,593 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:09,595 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:09,596 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:09,596 INFO L794 eck$LassoCheckResult]: Stem: 518320#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 518321#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 519981#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 520289#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 519092#L385 assume 0 != main_~tmp~8; 519093#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 516289#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 516290#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 517950#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 519118#L970 assume 0 == initPersonOnFloor_~floor; 519767#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 515087#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 517717#L762 assume !(0 == callOnFloor_~floorID); 517592#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 514940#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 552137#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 552136#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 552134#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 552132#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 552133#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 552152#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 516355#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 515006#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 516138#L699 assume !(0 == isFloorCalling_~floorID); 516139#L703 assume !(1 == isFloorCalling_~floorID); 519935#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 518414#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 515942#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 515943#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 520120#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 519486#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 514895#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 514897#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 520813#L2854 assume !(0 != timeShift_~tmp___9~3); 518724#L2945 assume !(1 == ~doorState~0); 518725#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 518727#L2296 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~7;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~7;isTopFloor_~retValue_acc~7 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~7; 519524#L1273 stopRequestedInDirection_#t~ret76 := isTopFloor_#res;stopRequestedInDirection_~tmp~18 := stopRequestedInDirection_#t~ret76;havoc stopRequestedInDirection_#t~ret76; 550363#L2300 assume 0 != stopRequestedInDirection_~tmp~18;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 518172#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 550353#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 550349#L2672 assume !(1 == ~currentHeading~0); 550347#L2682 assume !(0 == ~currentFloorID~0); 547837#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 547836#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 547834#L1436 assume !(-1 == ~expectedDirection~0); 547829#L1448 assume !(1 == ~expectedDirection~0); 547827#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 547822#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 547820#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 547819#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 547815#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 547811#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 547808#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 547805#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 547773#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 547761#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 547758#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 547756#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 547751#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 547746#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 547738#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 547735#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 547732#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 547726#L2854-1 assume !(0 != timeShift_~tmp___9~3); 547725#L2945-3 assume !(1 == ~doorState~0); 547724#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 547721#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 547722#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 547895#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 550151#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 550150#L2672-3 assume !(1 == ~currentHeading~0); 547582#L2682-9 assume !(0 == ~currentFloorID~0); 547576#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 547574#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 547571#L1436-1 assume !(-1 == ~expectedDirection~0); 547568#L1448-1 assume !(1 == ~expectedDirection~0); 547567#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 547566#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 547565#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 547563#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 547564#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 539866#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 539862#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 539859#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 539821#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 539818#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 539816#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 539815#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 539804#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 539805#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 539810#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 539806#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 539807#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 547098#L2854-2 assume !(0 != timeShift_~tmp___9~3); 547099#L2945-6 assume !(1 == ~doorState~0); 547135#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 547132#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 547133#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 547128#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 547376#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 547377#L2672-6 assume !(1 == ~currentHeading~0); 547024#L2682-18 assume !(0 == ~currentFloorID~0); 536894#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 536890#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 536887#L1436-2 assume !(-1 == ~expectedDirection~0); 536884#L1448-2 assume !(1 == ~expectedDirection~0); 536883#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 536881#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 536876#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 536875#L970-1 assume 0 == initPersonOnFloor_~floor; 536847#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 536840#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 536839#L762-2 assume !(0 == callOnFloor_~floorID); 536836#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 536834#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 536832#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 536833#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 539994#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 539992#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 536821#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 536815#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 536811#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 536566#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 536497#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 536489#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 536487#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 536483#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 536485#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 536488#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 536486#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 536444#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 536445#L2854-3 assume !(0 != timeShift_~tmp___9~3); 546348#L2945-9 assume !(1 == ~doorState~0); 546300#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 546291#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 536647#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 536594#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 536442#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 536443#L2672-9 assume !(1 == ~currentHeading~0); 536591#L2682-27 assume !(0 == ~currentFloorID~0); 536375#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 520843#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 520840#L1436-3 assume !(-1 == ~expectedDirection~0); 520834#L1448-3 assume !(1 == ~expectedDirection~0); 520829#L1449-3 cleanup_~i~0 := 0; 520827#L188-2 [2019-11-20 05:35:09,597 INFO L796 eck$LassoCheckResult]: Loop: 520827#L188-2 assume !false; 520826#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 520825#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 520823#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 520824#L196 assume 1 != cleanup_~tmp___0~0; 521468#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 521467#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 521466#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 521464#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 521462#L2204 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 521461#L699-85 assume !(0 == isFloorCalling_~floorID); 521455#L703-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 521416#L726-85 anyStopRequested_#t~ret71 := isFloorCalling_#res;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret71;havoc anyStopRequested_#t~ret71; 521328#L2211 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 521322#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 521314#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 521315#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 521306#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 521307#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 521295#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 521296#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 521158#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 521146#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 521137#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 521129#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 521126#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 521124#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 521123#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 521122#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 521121#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 521115#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 521110#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 521104#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 521098#L2854-4 assume !(0 != timeShift_~tmp___9~3); 521095#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 521083#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 521075#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 521058#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 521052#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 521048#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 521049#L2672-12 assume !(1 == ~currentHeading~0); 521300#L2682-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 520850#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 520842#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 520837#L1436-4 assume !(-1 == ~expectedDirection~0); 520831#L1448-4 assume !(1 == ~expectedDirection~0); 520828#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 520827#L188-2 [2019-11-20 05:35:09,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:09,597 INFO L82 PathProgramCache]: Analyzing trace with hash -1723882246, now seen corresponding path program 3 times [2019-11-20 05:35:09,597 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:09,597 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1454425751] [2019-11-20 05:35:09,597 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:09,619 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:09,683 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:09,683 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1454425751] [2019-11-20 05:35:09,683 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:09,684 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:09,684 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1029864102] [2019-11-20 05:35:09,684 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:09,685 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:09,685 INFO L82 PathProgramCache]: Analyzing trace with hash -927398331, now seen corresponding path program 1 times [2019-11-20 05:35:09,685 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:09,685 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1795239798] [2019-11-20 05:35:09,685 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:09,692 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:09,716 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:09,716 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1795239798] [2019-11-20 05:35:09,717 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:09,717 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:09,717 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1068598940] [2019-11-20 05:35:09,717 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:09,717 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:09,718 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-20 05:35:09,718 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-20 05:35:09,718 INFO L87 Difference]: Start difference. First operand 47299 states and 88631 transitions. cyclomatic complexity: 41333 Second operand 4 states. [2019-11-20 05:35:10,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:10,501 INFO L93 Difference]: Finished difference Result 86861 states and 163195 transitions. [2019-11-20 05:35:10,501 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-20 05:35:10,502 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 86861 states and 163195 transitions. [2019-11-20 05:35:11,694 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20946 [2019-11-20 05:35:11,891 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 86861 states to 86861 states and 163195 transitions. [2019-11-20 05:35:11,891 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 86861 [2019-11-20 05:35:11,946 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 86861 [2019-11-20 05:35:11,947 INFO L73 IsDeterministic]: Start isDeterministic. Operand 86861 states and 163195 transitions. [2019-11-20 05:35:11,986 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:11,987 INFO L688 BuchiCegarLoop]: Abstraction has 86861 states and 163195 transitions. [2019-11-20 05:35:12,030 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 86861 states and 163195 transitions. [2019-11-20 05:35:12,413 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 86861 to 47351. [2019-11-20 05:35:12,413 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47351 states. [2019-11-20 05:35:12,478 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47351 states to 47351 states and 88683 transitions. [2019-11-20 05:35:12,478 INFO L711 BuchiCegarLoop]: Abstraction has 47351 states and 88683 transitions. [2019-11-20 05:35:12,478 INFO L591 BuchiCegarLoop]: Abstraction has 47351 states and 88683 transitions. [2019-11-20 05:35:12,478 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-11-20 05:35:12,479 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47351 states and 88683 transitions. [2019-11-20 05:35:12,589 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11012 [2019-11-20 05:35:12,589 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:12,589 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:12,591 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:12,591 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:12,592 INFO L794 eck$LassoCheckResult]: Stem: 652569#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 652570#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 654354#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 654719#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 653414#L385 assume 0 != main_~tmp~8; 653415#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 650496#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 650497#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 652194#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 653439#L970 assume 0 == initPersonOnFloor_~floor; 654120#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 649260#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 651949#L762 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 649040#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 649041#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 649832#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 649124#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 649125#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 650615#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 655941#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 650567#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 649179#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 650333#L699 assume !(0 == isFloorCalling_~floorID); 650334#L703 assume !(1 == isFloorCalling_~floorID); 654303#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 654304#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 650134#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 650135#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 654511#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 653828#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 649067#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 649069#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 655286#L2854 assume !(0 != timeShift_~tmp___9~3); 655287#L2945 assume !(1 == ~doorState~0); 653022#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 653023#L2296 assume !(1 == stopRequestedInDirection_~dir); 654375#L2465 assume !(0 == ~currentFloorID~0); 654376#L2471 assume !(~currentFloorID~0 > 0); 652809#L2486 assume ~currentFloorID~0 > 0; 652624#L2488 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652268#L2489 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 652269#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 655311#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653552#L2672 assume !(1 == ~currentHeading~0); 653553#L2682 assume !(0 == ~currentFloorID~0); 651592#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651571#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 660153#L1436 assume !(-1 == ~expectedDirection~0); 660082#L1448 assume !(1 == ~expectedDirection~0); 659974#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 659969#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 659967#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 659966#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 659964#L1367-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 659965#L2109-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 666817#L2130-16 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 666816#L1371-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 666812#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 667283#L699-21 assume !(0 == isFloorCalling_~floorID); 667282#L703-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 667274#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 667271#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 667272#L2109-21 assume !(0 == buttonForFloorIsPressed_~floorID); 667278#L2113-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 667273#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 667270#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 667263#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 667255#L2854-1 assume !(0 != timeShift_~tmp___9~3); 656714#L2945-3 assume !(1 == ~doorState~0); 656002#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 656003#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 670289#L2465-2 assume !(0 == ~currentFloorID~0); 670288#L2471-2 assume !(~currentFloorID~0 > 0); 655389#L2486-2 assume ~currentFloorID~0 > 0; 670268#L2488-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652273#L2489-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 649281#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 661578#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653537#L2672-3 assume !(1 == ~currentHeading~0); 653538#L2682-9 assume !(0 == ~currentFloorID~0); 651583#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651512#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 693160#L1436-1 assume !(-1 == ~expectedDirection~0); 693157#L1448-1 assume !(1 == ~expectedDirection~0); 677556#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 677555#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 677554#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 677552#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 677535#L1367-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 677533#L2109-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 677529#L2130-27 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 677522#L1371-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 677521#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 677520#L699-42 assume !(0 == isFloorCalling_~floorID); 677519#L703-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 677515#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 677514#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 677513#L2109-32 assume !(0 == buttonForFloorIsPressed_~floorID); 664973#L2113-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 664965#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 662210#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 662199#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 661818#L2854-2 assume !(0 != timeShift_~tmp___9~3); 656701#L2945-6 assume !(1 == ~doorState~0); 656702#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 661762#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 655411#L2465-4 assume !(0 == ~currentFloorID~0); 655412#L2471-4 assume !(~currentFloorID~0 > 0); 655405#L2486-4 assume ~currentFloorID~0 > 0; 661735#L2488-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652287#L2489-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 652288#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 662011#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 662012#L2672-6 assume !(1 == ~currentHeading~0); 671849#L2682-18 assume !(0 == ~currentFloorID~0); 651525#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651174#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 651175#L1436-2 assume !(-1 == ~expectedDirection~0); 652164#L1448-2 assume !(1 == ~expectedDirection~0); 651575#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 651576#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 694848#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 694846#L970-1 assume 0 == initPersonOnFloor_~floor; 694813#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 694804#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 651928#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 649054#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 694639#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 694637#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 694635#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 694630#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 685719#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 685714#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 685701#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 685697#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 685696#L699-63 assume !(0 == isFloorCalling_~floorID); 685693#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 685687#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 685683#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 685684#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 685689#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 685686#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 685685#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 685682#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 685679#L2854-3 assume !(0 != timeShift_~tmp___9~3); 676406#L2945-9 assume !(1 == ~doorState~0); 695917#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 695916#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 695915#L2465-6 assume !(0 == ~currentFloorID~0); 695914#L2471-6 assume !(~currentFloorID~0 > 0); 652503#L2486-6 assume ~currentFloorID~0 > 0; 652505#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 652251#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 649303#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 671878#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653524#L2672-9 assume !(1 == ~currentHeading~0); 653525#L2682-27 assume !(0 == ~currentFloorID~0); 651696#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 651115#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 651116#L1436-3 assume !(-1 == ~expectedDirection~0); 652156#L1448-3 assume !(1 == ~expectedDirection~0); 651379#L1449-3 cleanup_~i~0 := 0; 651581#L188-2 [2019-11-20 05:35:12,593 INFO L796 eck$LassoCheckResult]: Loop: 651581#L188-2 assume !false; 695323#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 695322#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 695321#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 695320#L196 assume 1 != cleanup_~tmp___0~0; 695319#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 695318#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 652368#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 652369#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 693776#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 693774#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 693772#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 693770#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 693767#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 693764#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 693765#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 693826#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 693822#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 693738#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 693737#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 693736#L699-89 assume !(0 == isFloorCalling_~floorID); 693733#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 693727#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 693722#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 693723#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 693729#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 693726#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 693724#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 693725#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 696177#L2854-4 assume !(0 != timeShift_~tmp___9~3); 696173#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 652975#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 652976#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 655275#L2465-8 assume !(0 == ~currentFloorID~0); 655344#L2471-8 assume !(~currentFloorID~0 > 0); 655343#L2486-8 assume ~currentFloorID~0 > 0; 655337#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 655338#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 661583#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 661584#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 653506#L2672-12 assume !(1 == ~currentHeading~0); 653507#L2682-36 assume !(0 == ~currentFloorID~0); 651664#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 651089#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 651090#L1436-4 assume !(-1 == ~expectedDirection~0); 652158#L1448-4 assume !(1 == ~expectedDirection~0); 651395#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 651581#L188-2 [2019-11-20 05:35:12,594 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:12,594 INFO L82 PathProgramCache]: Analyzing trace with hash 480871056, now seen corresponding path program 1 times [2019-11-20 05:35:12,594 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:12,594 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [565011910] [2019-11-20 05:35:12,595 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:12,614 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:12,669 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:12,670 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [565011910] [2019-11-20 05:35:12,670 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:12,670 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:12,670 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [254891185] [2019-11-20 05:35:12,671 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:12,671 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:12,671 INFO L82 PathProgramCache]: Analyzing trace with hash 1521936943, now seen corresponding path program 1 times [2019-11-20 05:35:12,672 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:12,672 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1715838034] [2019-11-20 05:35:12,672 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:12,678 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:12,688 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:12,689 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1715838034] [2019-11-20 05:35:12,689 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:12,689 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 05:35:12,689 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [46260568] [2019-11-20 05:35:12,690 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:12,690 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:12,690 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 05:35:12,690 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 05:35:12,690 INFO L87 Difference]: Start difference. First operand 47351 states and 88683 transitions. cyclomatic complexity: 41333 Second operand 3 states. [2019-11-20 05:35:14,157 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:14,157 INFO L93 Difference]: Finished difference Result 88771 states and 165851 transitions. [2019-11-20 05:35:14,158 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 05:35:14,158 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 88771 states and 165851 transitions. [2019-11-20 05:35:14,477 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21332 [2019-11-20 05:35:14,701 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 88771 states to 88771 states and 165851 transitions. [2019-11-20 05:35:14,701 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 88771 [2019-11-20 05:35:14,764 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 88771 [2019-11-20 05:35:14,764 INFO L73 IsDeterministic]: Start isDeterministic. Operand 88771 states and 165851 transitions. [2019-11-20 05:35:14,806 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:14,806 INFO L688 BuchiCegarLoop]: Abstraction has 88771 states and 165851 transitions. [2019-11-20 05:35:14,856 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 88771 states and 165851 transitions. [2019-11-20 05:35:15,444 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 88771 to 88771. [2019-11-20 05:35:15,445 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 88771 states. [2019-11-20 05:35:15,585 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 88771 states to 88771 states and 165851 transitions. [2019-11-20 05:35:15,585 INFO L711 BuchiCegarLoop]: Abstraction has 88771 states and 165851 transitions. [2019-11-20 05:35:15,585 INFO L591 BuchiCegarLoop]: Abstraction has 88771 states and 165851 transitions. [2019-11-20 05:35:15,585 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-11-20 05:35:15,585 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 88771 states and 165851 transitions. [2019-11-20 05:35:15,801 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 21332 [2019-11-20 05:35:15,802 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:15,802 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:15,805 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:15,805 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:15,806 INFO L794 eck$LassoCheckResult]: Stem: 788653#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 788654#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 790360#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 790659#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 789463#L385 assume 0 != main_~tmp~8; 789464#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 786620#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 786621#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 788306#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 789487#L970 assume 0 == initPersonOnFloor_~floor; 790143#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 785386#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 788054#L762 assume !(0 == callOnFloor_~floorID); 787929#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 785170#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 785171#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 785959#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 785250#L1305 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 785251#L1306 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 786740#L2109 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 790261#L2130 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 786686#L1310 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 785305#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 786456#L699 assume !(0 == isFloorCalling_~floorID); 786457#L703 assume !(1 == isFloorCalling_~floorID); 790314#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 788754#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 786258#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 786259#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 790502#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 789857#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 785197#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 785199#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 791196#L2854 assume !(0 != timeShift_~tmp___9~3); 789093#L2945 assume !(1 == ~doorState~0); 789094#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 789096#L2296 assume !(1 == stopRequestedInDirection_~dir); 789895#L2465 assume !(0 == ~currentFloorID~0); 790037#L2471 assume ~currentFloorID~0 > 0; 789930#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 786451#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 786452#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 788736#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 785435#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 796891#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 796887#L2672 assume !(1 == ~currentHeading~0); 796884#L2682 assume !(0 == ~currentFloorID~0); 796680#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 796677#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 796675#L1436 assume !(-1 == ~expectedDirection~0); 796670#L1448 assume !(1 == ~expectedDirection~0); 796668#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 796663#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 796661#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 796659#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 796657#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 796655#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 796652#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 796650#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 796613#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 796609#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 796607#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 796575#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 796573#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 796567#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 796562#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 796559#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 796558#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 796556#L2854-1 assume !(0 != timeShift_~tmp___9~3); 796555#L2945-3 assume !(1 == ~doorState~0); 796554#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 796552#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 796553#L2465-2 assume !(0 == ~currentFloorID~0); 791326#L2471-2 assume ~currentFloorID~0 > 0; 791322#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 791323#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 791328#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 791320#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 791321#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 796431#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 796430#L2672-3 assume !(1 == ~currentHeading~0); 796406#L2682-9 assume !(0 == ~currentFloorID~0); 796388#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 796383#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 799245#L1436-1 assume !(-1 == ~expectedDirection~0); 799244#L1448-1 assume !(1 == ~expectedDirection~0); 799240#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 799238#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 799236#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 799233#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 799234#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 792617#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 792613#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 792610#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 792589#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 792586#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 792584#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 792578#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 792575#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 792576#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 791799#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 791797#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 791796#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 791794#L2854-2 assume !(0 != timeShift_~tmp___9~3); 791793#L2945-6 assume !(1 == ~doorState~0); 791792#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 791790#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 791791#L2465-4 assume !(0 == ~currentFloorID~0); 790366#L2471-4 assume ~currentFloorID~0 > 0; 791667#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 791666#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 791407#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 791408#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 791635#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 791634#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 791630#L2672-6 assume !(1 == ~currentHeading~0); 791628#L2682-18 assume !(0 == ~currentFloorID~0); 791618#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 791613#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 817687#L1436-2 assume !(-1 == ~expectedDirection~0); 817628#L1448-2 assume !(1 == ~expectedDirection~0); 791601#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 791602#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 817185#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 817153#L970-1 assume 0 == initPersonOnFloor_~floor; 791563#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 791556#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 791553#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 791554#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 817814#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 817797#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 817796#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 817008#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 817009#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 817109#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 817107#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 817108#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 839305#L699-63 assume !(0 == isFloorCalling_~floorID); 839302#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 839295#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 839293#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 815476#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 791488#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 791485#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 791481#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 791479#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 791246#L2854-3 assume !(0 != timeShift_~tmp___9~3); 791245#L2945-9 assume !(1 == ~doorState~0); 791244#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 791241#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 791242#L2465-6 assume !(0 == ~currentFloorID~0); 791235#L2471-6 assume ~currentFloorID~0 > 0; 791237#L2472-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 791227#L2486-6 assume ~currentFloorID~0 > 0; 791229#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 791222#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 785429#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 850715#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 850716#L2672-9 assume !(1 == ~currentHeading~0); 851345#L2682-27 assume !(0 == ~currentFloorID~0); 850130#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 787788#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 857953#L1436-3 assume !(-1 == ~expectedDirection~0); 857950#L1448-3 assume !(1 == ~expectedDirection~0); 857948#L1449-3 cleanup_~i~0 := 0; 857946#L188-2 [2019-11-20 05:35:15,808 INFO L796 eck$LassoCheckResult]: Loop: 857946#L188-2 assume !false; 857945#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 857944#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 857943#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 857942#L196 assume 1 != cleanup_~tmp___0~0; 857941#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 857940#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 857939#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 857938#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 847265#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 857937#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 857936#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 857935#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 857934#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 857932#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 857933#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 845887#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 845883#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 845855#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 845854#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 845848#L699-89 assume !(0 == isFloorCalling_~floorID); 845844#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 845838#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 845835#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 845836#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 845840#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 845837#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 845834#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 845832#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 845831#L2854-4 assume !(0 != timeShift_~tmp___9~3); 844290#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 844287#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 844285#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 790341#L2465-8 assume !(0 == ~currentFloorID~0); 790342#L2471-8 assume ~currentFloorID~0 > 0; 789918#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 789919#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 844429#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 790976#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 785705#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 849655#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 849656#L2672-12 assume !(1 == ~currentHeading~0); 855455#L2682-36 assume !(0 == ~currentFloorID~0); 855454#L2682-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 787761#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 857959#L1436-4 assume !(-1 == ~expectedDirection~0); 857956#L1448-4 assume !(1 == ~expectedDirection~0); 857947#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 857946#L188-2 [2019-11-20 05:35:15,809 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:15,809 INFO L82 PathProgramCache]: Analyzing trace with hash 484048644, now seen corresponding path program 1 times [2019-11-20 05:35:15,809 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:15,809 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [250417524] [2019-11-20 05:35:15,810 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:15,831 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:15,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:15,902 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [250417524] [2019-11-20 05:35:15,902 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:15,902 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:15,903 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [882103141] [2019-11-20 05:35:15,903 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:15,903 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:15,904 INFO L82 PathProgramCache]: Analyzing trace with hash -1153930592, now seen corresponding path program 1 times [2019-11-20 05:35:15,904 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:15,904 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1937496791] [2019-11-20 05:35:15,904 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:15,913 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:15,942 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:15,942 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1937496791] [2019-11-20 05:35:15,942 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:15,943 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-11-20 05:35:15,943 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [908722090] [2019-11-20 05:35:15,943 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:15,944 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:15,944 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-11-20 05:35:15,944 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-11-20 05:35:15,944 INFO L87 Difference]: Start difference. First operand 88771 states and 165851 transitions. cyclomatic complexity: 77081 Second operand 5 states. [2019-11-20 05:35:18,098 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:18,098 INFO L93 Difference]: Finished difference Result 132785 states and 247061 transitions. [2019-11-20 05:35:18,099 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-11-20 05:35:18,099 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 132785 states and 247061 transitions. [2019-11-20 05:35:18,604 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 32460 [2019-11-20 05:35:18,969 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 132785 states to 132785 states and 247061 transitions. [2019-11-20 05:35:18,969 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 132785 [2019-11-20 05:35:19,066 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 132785 [2019-11-20 05:35:19,066 INFO L73 IsDeterministic]: Start isDeterministic. Operand 132785 states and 247061 transitions. [2019-11-20 05:35:19,128 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:19,128 INFO L688 BuchiCegarLoop]: Abstraction has 132785 states and 247061 transitions. [2019-11-20 05:35:19,203 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 132785 states and 247061 transitions. [2019-11-20 05:35:20,068 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 132785 to 130325. [2019-11-20 05:35:20,068 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 130325 states. [2019-11-20 05:35:20,283 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130325 states to 130325 states and 243117 transitions. [2019-11-20 05:35:20,283 INFO L711 BuchiCegarLoop]: Abstraction has 130325 states and 243117 transitions. [2019-11-20 05:35:20,283 INFO L591 BuchiCegarLoop]: Abstraction has 130325 states and 243117 transitions. [2019-11-20 05:35:20,283 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-11-20 05:35:20,284 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130325 states and 243117 transitions. [2019-11-20 05:35:20,592 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31792 [2019-11-20 05:35:20,592 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:20,592 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:20,594 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:20,594 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:20,595 INFO L794 eck$LassoCheckResult]: Stem: 1010288#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1010289#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1012136#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1012505#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1011196#L385 assume 0 != main_~tmp~8; 1011197#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1008205#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1008206#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1009933#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1011219#L970 assume 0 == initPersonOnFloor_~floor; 1011924#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1006957#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1009666#L762 assume !(0 == callOnFloor_~floorID); 1009533#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1006744#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1006745#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1007528#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1006826#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1006827#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1008632#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1012002#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1008557#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1006876#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1008033#L699 assume !(0 == isFloorCalling_~floorID); 1008034#L703 assume !(1 == isFloorCalling_~floorID); 1012091#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1012092#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1007837#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1007838#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1012281#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1011607#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1006771#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1006773#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1013081#L2854 assume !(0 != timeShift_~tmp___9~3); 1010752#L2945 assume !(1 == ~doorState~0); 1010753#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1010755#L2296 assume !(1 == stopRequestedInDirection_~dir); 1011647#L2465 assume !(0 == ~currentFloorID~0); 1011803#L2471 assume ~currentFloorID~0 > 0; 1011687#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1011688#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1026928#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1012890#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1007006#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1013482#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1013483#L2672 assume !(1 == ~currentHeading~0); 1027992#L2682 assume !(0 == ~currentFloorID~0); 1027990#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1023630#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1027988#L1436 assume !(-1 == ~expectedDirection~0); 1027984#L1448 assume !(1 == ~expectedDirection~0); 1027964#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1027962#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1027960#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1027958#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1021388#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1027952#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1027948#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1027944#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1027940#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1027937#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1027934#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1027931#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1027929#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1027926#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1027917#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1027914#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1027911#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1027908#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1027905#L2945-3 assume !(1 == ~doorState~0); 1027903#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1027899#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1027900#L2465-2 assume !(0 == ~currentFloorID~0); 1028064#L2471-2 assume ~currentFloorID~0 > 0; 1029348#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1029346#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1029345#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1029284#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1029260#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1029261#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1041565#L2672-3 assume !(1 == ~currentHeading~0); 1041552#L2682-9 assume !(0 == ~currentFloorID~0); 1041543#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1041539#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1029890#L1436-1 assume !(-1 == ~expectedDirection~0); 1028352#L1448-1 assume !(1 == ~expectedDirection~0); 1027982#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1027983#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1017580#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1017581#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1017568#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1017564#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1017560#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1017556#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1017552#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1017549#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1017546#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1017543#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1017541#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1017538#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1017529#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1017526#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1017523#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1017520#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1017517#L2945-6 assume !(1 == ~doorState~0); 1017515#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1017512#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1017513#L2465-4 assume !(0 == ~currentFloorID~0); 1027542#L2471-4 assume ~currentFloorID~0 > 0; 1032821#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1013351#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1013347#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1013348#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1032734#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1032735#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1053044#L2672-6 assume !(1 == ~currentHeading~0); 1053024#L2682-18 assume !(0 == ~currentFloorID~0); 1052976#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1052973#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1052970#L1436-2 assume !(-1 == ~expectedDirection~0); 1052967#L1448-2 assume !(1 == ~expectedDirection~0); 1052966#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1052957#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1052950#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1052899#L970-1 assume 0 == initPersonOnFloor_~floor; 1052737#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1052729#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1052718#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1052719#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1127535#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1127534#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1127533#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1081127#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1030203#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1117071#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1117070#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1030073#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1030067#L699-63 assume !(0 == isFloorCalling_~floorID); 1030048#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1030044#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1030043#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1030042#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1014054#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1014012#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1014008#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1013587#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1013588#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1013314#L2945-9 assume !(1 == ~doorState~0); 1013315#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1013309#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1013310#L2465-6 assume !(0 == ~currentFloorID~0); 1136099#L2471-6 assume ~currentFloorID~0 > 0; 1136098#L2472-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1136017#L2486-6 assume ~currentFloorID~0 > 0; 1136095#L2488-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1136096#L2489-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1009986#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1065918#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1011305#L2672-9 assume !(1 == ~currentHeading~0); 1011306#L2682-27 assume !(0 == ~currentFloorID~0); 1136614#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1129544#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1136996#L1436-3 assume !(-1 == ~expectedDirection~0); 1010723#L1448-3 assume !(1 == ~expectedDirection~0); 1009092#L1449-3 cleanup_~i~0 := 0; 1009288#L188-2 [2019-11-20 05:35:20,596 INFO L796 eck$LassoCheckResult]: Loop: 1009288#L188-2 assume !false; 1012669#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1012608#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1010048#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1010049#L196 assume 1 != cleanup_~tmp___0~0; 1010227#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1010228#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1010105#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1010106#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1136238#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1136237#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1136236#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1136235#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1136234#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1136233#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1083514#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1129193#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1129189#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1129181#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1129144#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1129790#L699-89 assume !(0 == isFloorCalling_~floorID); 1129787#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1129785#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1129784#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1129783#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1129756#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1129754#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1129752#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1129751#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1013534#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1013535#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1013513#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1013514#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1013493#L2465-8 assume !(0 == ~currentFloorID~0); 1013486#L2471-8 assume ~currentFloorID~0 > 0; 1011673#L2472-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1011675#L2486-8 assume ~currentFloorID~0 > 0; 1010326#L2488-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1010327#L2489-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1091075#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1066101#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1011284#L2672-12 assume !(1 == ~currentHeading~0); 1011285#L2682-36 assume !(0 == ~currentFloorID~0); 1009374#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1008798#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1008799#L1436-4 assume !(-1 == ~expectedDirection~0); 1009896#L1448-4 assume !(1 == ~expectedDirection~0); 1009291#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1009288#L188-2 [2019-11-20 05:35:20,597 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:20,597 INFO L82 PathProgramCache]: Analyzing trace with hash 1069749471, now seen corresponding path program 1 times [2019-11-20 05:35:20,597 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:20,597 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1002262639] [2019-11-20 05:35:20,598 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:20,616 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:20,667 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:20,667 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1002262639] [2019-11-20 05:35:20,668 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:20,668 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:20,668 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1419135321] [2019-11-20 05:35:20,668 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:20,669 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:20,669 INFO L82 PathProgramCache]: Analyzing trace with hash 407542655, now seen corresponding path program 1 times [2019-11-20 05:35:20,669 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:20,669 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [865337210] [2019-11-20 05:35:20,670 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:20,675 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:20,694 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:20,694 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [865337210] [2019-11-20 05:35:20,694 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:20,695 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:20,695 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2036584637] [2019-11-20 05:35:20,695 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:20,695 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:20,695 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-20 05:35:20,695 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-20 05:35:20,695 INFO L87 Difference]: Start difference. First operand 130325 states and 243117 transitions. cyclomatic complexity: 112793 Second operand 4 states. [2019-11-20 05:35:23,503 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:23,503 INFO L93 Difference]: Finished difference Result 152013 states and 280435 transitions. [2019-11-20 05:35:23,504 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-20 05:35:23,504 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 152013 states and 280435 transitions. [2019-11-20 05:35:24,061 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 36378 [2019-11-20 05:35:24,470 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 152013 states to 152013 states and 280435 transitions. [2019-11-20 05:35:24,470 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 152013 [2019-11-20 05:35:24,577 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 152013 [2019-11-20 05:35:24,578 INFO L73 IsDeterministic]: Start isDeterministic. Operand 152013 states and 280435 transitions. [2019-11-20 05:35:24,649 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:24,650 INFO L688 BuchiCegarLoop]: Abstraction has 152013 states and 280435 transitions. [2019-11-20 05:35:24,736 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 152013 states and 280435 transitions. [2019-11-20 05:35:25,605 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 152013 to 130325. [2019-11-20 05:35:25,605 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 130325 states. [2019-11-20 05:35:25,829 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 130325 states to 130325 states and 242079 transitions. [2019-11-20 05:35:25,829 INFO L711 BuchiCegarLoop]: Abstraction has 130325 states and 242079 transitions. [2019-11-20 05:35:25,829 INFO L591 BuchiCegarLoop]: Abstraction has 130325 states and 242079 transitions. [2019-11-20 05:35:25,829 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-11-20 05:35:25,829 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 130325 states and 242079 transitions. [2019-11-20 05:35:26,149 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 31792 [2019-11-20 05:35:26,149 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:26,149 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:26,151 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:26,152 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:26,152 INFO L794 eck$LassoCheckResult]: Stem: 1292571#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1292572#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1294294#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1294639#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1293393#L385 assume 0 != main_~tmp~8; 1293394#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1290531#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1290532#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1292218#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1293418#L970 assume 0 == initPersonOnFloor_~floor; 1294075#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1289307#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1291978#L762 assume !(0 == callOnFloor_~floorID); 1291840#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1289095#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1289096#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1289876#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1289176#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1289177#L1367 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1290960#L2109-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1294699#L2130-5 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1294700#L1371 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1294007#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1294008#L699 assume !(0 == isFloorCalling_~floorID); 1294351#L703 assume !(1 == isFloorCalling_~floorID); 1294352#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1292687#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1292688#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1294521#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1294522#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1294689#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1294690#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1295212#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1295213#L2854 assume !(0 != timeShift_~tmp___9~3); 1293015#L2945 assume !(1 == ~doorState~0); 1293016#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1293829#L2296 assume !(1 == stopRequestedInDirection_~dir); 1293830#L2465 assume !(0 == ~currentFloorID~0); 1293967#L2471 assume ~currentFloorID~0 > 0; 1293968#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1290368#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1290369#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1295042#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1289356#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1298883#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1299792#L2672 assume !(1 == ~currentHeading~0); 1299790#L2682 assume !(0 == ~currentFloorID~0); 1299783#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1299628#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1299670#L1436 assume !(-1 == ~expectedDirection~0); 1299659#L1448 assume !(1 == ~expectedDirection~0); 1299649#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1299646#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1299642#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1299639#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1299549#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1299625#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1299619#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1299611#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1299596#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1299592#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1299590#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1299589#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1299588#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1299586#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1299582#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1299580#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1299578#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1299575#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1299573#L2945-3 assume !(1 == ~doorState~0); 1299570#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1299566#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1299567#L2465-2 assume !(0 == ~currentFloorID~0); 1299917#L2471-2 assume ~currentFloorID~0 > 0; 1299990#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1299989#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1299988#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1299986#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1299987#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1416542#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1303849#L2672-3 assume !(1 == ~currentHeading~0); 1291603#L2682-9 assume !(0 == ~currentFloorID~0); 1291604#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1291544#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1417467#L1436-1 assume !(-1 == ~expectedDirection~0); 1416220#L1448-1 assume !(1 == ~expectedDirection~0); 1414297#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1414293#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1414287#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1389333#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1389332#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1360866#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1360864#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1360862#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1360849#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1356649#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1356647#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1356646#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1356645#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1356152#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1356148#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1356142#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1356140#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1356138#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1356137#L2945-6 assume !(1 == ~doorState~0); 1356135#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1355758#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1355759#L2465-4 assume !(0 == ~currentFloorID~0); 1361071#L2471-4 assume ~currentFloorID~0 > 0; 1379043#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1379042#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1379041#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1379039#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1379040#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1414303#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1409512#L2672-6 assume !(1 == ~currentHeading~0); 1409510#L2682-18 assume !(0 == ~currentFloorID~0); 1409506#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1336006#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1409503#L1436-2 assume !(-1 == ~expectedDirection~0); 1409500#L1448-2 assume !(1 == ~expectedDirection~0); 1409499#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1409497#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1409492#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1409491#L970-1 assume 0 == initPersonOnFloor_~floor; 1409463#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1409456#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1409454#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1409455#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1410997#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1410995#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1410993#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1344600#L1367-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1408868#L2109-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1408823#L2130-38 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1408819#L1371-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1402085#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1402048#L699-63 assume !(0 == isFloorCalling_~floorID); 1400854#L703-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1400848#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1400844#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1400845#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1400850#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1400847#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1400846#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1400843#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1400840#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1295573#L2945-9 assume !(1 == ~doorState~0); 1295567#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1295564#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1295524#L2465-6 assume !(0 == ~currentFloorID~0); 1295520#L2471-6 assume ~currentFloorID~0 > 0; 1295522#L2472-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1380340#L699-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1380335#L726-69 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1380331#L2476-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1380332#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1411881#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1410106#L2672-9 assume !(1 == ~currentHeading~0); 1410103#L2682-27 assume !(0 == ~currentFloorID~0); 1409769#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1342184#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1409761#L1436-3 assume !(-1 == ~expectedDirection~0); 1409755#L1448-3 assume !(1 == ~expectedDirection~0); 1409750#L1449-3 cleanup_~i~0 := 0; 1409746#L188-2 [2019-11-20 05:35:26,154 INFO L796 eck$LassoCheckResult]: Loop: 1409746#L188-2 assume !false; 1409744#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1409742#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1409740#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1409738#L196 assume 1 != cleanup_~tmp___0~0; 1409736#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1409734#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1409732#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1409730#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1397317#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1409728#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1409726#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1409724#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1409722#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1409720#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1326667#L1367-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1409717#L2109-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1409713#L2130-49 __utac_acc__Specification3_spec__1_#t~ret27 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret27;havoc __utac_acc__Specification3_spec__1_#t~ret27; 1409708#L1371-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1409707#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1409706#L699-89 assume !(0 == isFloorCalling_~floorID); 1409700#L703-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1409694#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1409689#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1409691#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1409696#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1409693#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1409692#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1409687#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1409688#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1293001#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1292974#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1292975#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1294278#L2465-8 assume !(0 == ~currentFloorID~0); 1294279#L2471-8 assume ~currentFloorID~0 > 0; 1293852#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1293853#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1292367#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1292368#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1289625#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1414169#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1410118#L2672-12 assume !(1 == ~currentHeading~0); 1410117#L2682-36 assume !(0 == ~currentFloorID~0); 1293065#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1344210#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1410113#L1436-4 assume !(-1 == ~expectedDirection~0); 1410110#L1448-4 assume !(1 == ~expectedDirection~0); 1409749#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1409746#L188-2 [2019-11-20 05:35:26,154 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:26,154 INFO L82 PathProgramCache]: Analyzing trace with hash -489876734, now seen corresponding path program 1 times [2019-11-20 05:35:26,155 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:26,155 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1452980744] [2019-11-20 05:35:26,155 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:26,173 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:26,228 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:26,228 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1452980744] [2019-11-20 05:35:26,228 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:26,229 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:26,229 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1134726568] [2019-11-20 05:35:26,229 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:26,230 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:26,230 INFO L82 PathProgramCache]: Analyzing trace with hash -1152083550, now seen corresponding path program 1 times [2019-11-20 05:35:26,230 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:26,230 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1490327820] [2019-11-20 05:35:26,230 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:26,236 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:26,250 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:26,251 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1490327820] [2019-11-20 05:35:26,251 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:26,251 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-11-20 05:35:26,251 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [983929049] [2019-11-20 05:35:26,252 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:26,252 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:26,252 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-11-20 05:35:26,252 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-11-20 05:35:26,252 INFO L87 Difference]: Start difference. First operand 130325 states and 242079 transitions. cyclomatic complexity: 111755 Second operand 3 states. [2019-11-20 05:35:27,148 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:27,148 INFO L93 Difference]: Finished difference Result 190345 states and 353353 transitions. [2019-11-20 05:35:27,149 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-11-20 05:35:27,149 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 190345 states and 353353 transitions. [2019-11-20 05:35:27,852 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 46016 [2019-11-20 05:35:28,448 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 190345 states to 190345 states and 353353 transitions. [2019-11-20 05:35:28,448 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 190345 [2019-11-20 05:35:28,589 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 190345 [2019-11-20 05:35:28,589 INFO L73 IsDeterministic]: Start isDeterministic. Operand 190345 states and 353353 transitions. [2019-11-20 05:35:28,679 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:28,679 INFO L688 BuchiCegarLoop]: Abstraction has 190345 states and 353353 transitions. [2019-11-20 05:35:28,789 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 190345 states and 353353 transitions. [2019-11-20 05:35:37,903 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 190345 to 186801. [2019-11-20 05:35:37,904 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 186801 states. [2019-11-20 05:35:38,213 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 186801 states to 186801 states and 347313 transitions. [2019-11-20 05:35:38,213 INFO L711 BuchiCegarLoop]: Abstraction has 186801 states and 347313 transitions. [2019-11-20 05:35:38,213 INFO L591 BuchiCegarLoop]: Abstraction has 186801 states and 347313 transitions. [2019-11-20 05:35:38,214 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-11-20 05:35:38,214 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 186801 states and 347313 transitions. [2019-11-20 05:35:38,689 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 44984 [2019-11-20 05:35:38,689 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:38,689 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:38,692 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:38,692 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:38,692 INFO L794 eck$LassoCheckResult]: Stem: 1613275#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1613276#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1615021#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1615333#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1614123#L385 assume 0 != main_~tmp~8; 1614124#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1611227#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1611228#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1612926#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1614145#L970 assume 0 == initPersonOnFloor_~floor; 1614813#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1609986#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1612676#L762 assume !(0 == callOnFloor_~floorID); 1612536#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1609846#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1620753#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1620752#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1620751#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1620750#L1367 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1611582#L1377 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1612531#L1388 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1609904#L1399 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1611033#L1410 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1614603#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1614745#L699 assume !(0 == isFloorCalling_~floorID); 1615071#L703 assume !(1 == isFloorCalling_~floorID); 1615072#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1613383#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1613384#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1615229#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1615230#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1620804#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1620803#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1620802#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1620801#L2854 assume !(0 != timeShift_~tmp___9~3); 1620800#L2945 assume !(1 == ~doorState~0); 1620799#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1620798#L2296 assume !(1 == stopRequestedInDirection_~dir); 1620797#L2465 assume !(0 == ~currentFloorID~0); 1620796#L2471 assume ~currentFloorID~0 > 0; 1620795#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1620794#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1620793#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1615725#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1615726#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1621834#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1621832#L2672 assume !(1 == ~currentHeading~0); 1621608#L2682 assume !(0 == ~currentFloorID~0); 1621604#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1621603#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1621601#L1436 assume !(-1 == ~expectedDirection~0); 1621600#L1448 assume !(1 == ~expectedDirection~0); 1621596#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1621595#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1621594#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1621593#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1619076#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1621590#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1621588#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1621585#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1621580#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1621498#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1621499#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1622606#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1621434#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1621436#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1622407#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1622406#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1622405#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1622403#L2854-1 assume !(0 != timeShift_~tmp___9~3); 1622402#L2945-3 assume !(1 == ~doorState~0); 1622401#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1622399#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 1622400#L2465-2 assume !(0 == ~currentFloorID~0); 1622501#L2471-2 assume ~currentFloorID~0 > 0; 1622499#L2472-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1622497#L699-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1622483#L726-27 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1622438#L2476-2 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1622416#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1651062#L2953-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1651061#L2672-3 assume !(1 == ~currentHeading~0); 1619885#L2682-9 assume !(0 == ~currentFloorID~0); 1641714#L2682-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1616793#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1650982#L1436-1 assume !(-1 == ~expectedDirection~0); 1650981#L1448-1 assume !(1 == ~expectedDirection~0); 1641794#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1641793#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1641792#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1641789#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1627052#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1637835#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1637831#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1637827#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1637823#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1637820#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1637817#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1637814#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1637812#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1637809#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1637800#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1637797#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1637794#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1637791#L2854-2 assume !(0 != timeShift_~tmp___9~3); 1637788#L2945-6 assume !(1 == ~doorState~0); 1637786#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1637783#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1637776#L2465-4 assume !(0 == ~currentFloorID~0); 1637777#L2471-4 assume ~currentFloorID~0 > 0; 1638838#L2472-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1638844#L699-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1638841#L726-48 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1638839#L2476-4 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1638761#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1638762#L2953-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1721469#L2672-6 assume !(1 == ~currentHeading~0); 1721465#L2682-18 assume !(0 == ~currentFloorID~0); 1634893#L2682-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1721448#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1721445#L1436-2 assume !(-1 == ~expectedDirection~0); 1721440#L1448-2 assume !(1 == ~expectedDirection~0); 1721426#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1721418#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1721413#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1721411#L970-1 assume 0 == initPersonOnFloor_~floor; 1721115#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1721104#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1721102#L762-2 assume !(0 == callOnFloor_~floorID); 1721099#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1721097#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1707436#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1707437#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1707433#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1685916#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1707430#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1707428#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1707426#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1707424#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1707422#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1707419#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1707418#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1707414#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1707412#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1707407#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1707405#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1707404#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1707402#L2854-3 assume !(0 != timeShift_~tmp___9~3); 1707401#L2945-9 assume !(1 == ~doorState~0); 1707399#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1707396#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 1707397#L2465-6 assume !(0 == ~currentFloorID~0); 1719997#L2471-6 assume ~currentFloorID~0 > 0; 1719991#L2472-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1719989#L699-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1708579#L726-69 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1707464#L2476-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1707451#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1794227#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1794226#L2672-9 assume !(1 == ~currentHeading~0); 1707056#L2682-27 assume !(0 == ~currentFloorID~0); 1707052#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1700975#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1746480#L1436-3 assume !(-1 == ~expectedDirection~0); 1746481#L1448-3 assume !(1 == ~expectedDirection~0); 1746474#L1449-3 cleanup_~i~0 := 0; 1746472#L188-2 [2019-11-20 05:35:38,694 INFO L796 eck$LassoCheckResult]: Loop: 1746472#L188-2 assume !false; 1746471#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1746470#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1746468#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1746467#L196 assume 1 != cleanup_~tmp___0~0; 1746466#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1746462#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1746460#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 1746458#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 1746457#L2204 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1746456#L699-85 assume !(0 == isFloorCalling_~floorID); 1746452#L703-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1746450#L726-85 anyStopRequested_#t~ret71 := isFloorCalling_#res;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret71;havoc anyStopRequested_#t~ret71; 1722246#L2211 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1722207#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1722203#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1721886#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1721885#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1721884#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 1721883#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1680995#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1720714#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1720712#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1720709#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1720706#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1720702#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1720700#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1720699#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1720698#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1709257#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1709251#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 1707193#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1707189#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1707187#L2854-4 assume !(0 != timeShift_~tmp___9~3); 1707185#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1707182#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1707178#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 1707179#L2465-8 assume !(0 == ~currentFloorID~0); 1709678#L2471-8 assume ~currentFloorID~0 > 0; 1709676#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1709674#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1709673#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1707646#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1707632#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1707633#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1746493#L2672-12 assume !(1 == ~currentHeading~0); 1746490#L2682-36 assume !(0 == ~currentFloorID~0); 1701297#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1746487#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 1746484#L1436-4 assume !(-1 == ~expectedDirection~0); 1746485#L1448-4 assume !(1 == ~expectedDirection~0); 1746473#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1746472#L188-2 [2019-11-20 05:35:38,694 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:38,694 INFO L82 PathProgramCache]: Analyzing trace with hash 342397931, now seen corresponding path program 1 times [2019-11-20 05:35:38,695 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:38,695 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1720154901] [2019-11-20 05:35:38,695 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:38,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:38,774 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:38,775 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1720154901] [2019-11-20 05:35:38,775 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:38,775 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:38,775 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [899727648] [2019-11-20 05:35:38,778 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:38,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:38,779 INFO L82 PathProgramCache]: Analyzing trace with hash -1696664905, now seen corresponding path program 1 times [2019-11-20 05:35:38,779 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:38,779 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1619124735] [2019-11-20 05:35:38,779 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:38,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:38,812 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:38,812 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1619124735] [2019-11-20 05:35:38,812 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:38,812 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:38,812 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1835530300] [2019-11-20 05:35:38,813 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:38,813 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:38,813 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-20 05:35:38,813 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-20 05:35:38,813 INFO L87 Difference]: Start difference. First operand 186801 states and 347313 transitions. cyclomatic complexity: 160513 Second operand 4 states. [2019-11-20 05:35:42,396 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:35:42,397 INFO L93 Difference]: Finished difference Result 196929 states and 362501 transitions. [2019-11-20 05:35:42,397 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-11-20 05:35:42,397 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 196929 states and 362501 transitions. [2019-11-20 05:35:43,187 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 46714 [2019-11-20 05:35:43,856 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 196929 states to 195513 states and 360029 transitions. [2019-11-20 05:35:43,856 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 195513 [2019-11-20 05:35:43,999 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 195513 [2019-11-20 05:35:43,999 INFO L73 IsDeterministic]: Start isDeterministic. Operand 195513 states and 360029 transitions. [2019-11-20 05:35:44,092 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:35:44,092 INFO L688 BuchiCegarLoop]: Abstraction has 195513 states and 360029 transitions. [2019-11-20 05:35:44,206 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 195513 states and 360029 transitions. [2019-11-20 05:35:47,003 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 195513 to 187185. [2019-11-20 05:35:47,003 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 187185 states. [2019-11-20 05:35:47,304 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 187185 states to 187185 states and 347601 transitions. [2019-11-20 05:35:47,304 INFO L711 BuchiCegarLoop]: Abstraction has 187185 states and 347601 transitions. [2019-11-20 05:35:47,304 INFO L591 BuchiCegarLoop]: Abstraction has 187185 states and 347601 transitions. [2019-11-20 05:35:47,304 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-11-20 05:35:47,304 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 187185 states and 347601 transitions. [2019-11-20 05:35:47,735 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 45122 [2019-11-20 05:35:47,735 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:35:47,735 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:35:47,738 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:47,738 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:35:47,738 INFO L794 eck$LassoCheckResult]: Stem: 1997037#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 1997038#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1998784#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 1999129#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1997889#L385 assume 0 != main_~tmp~8; 1997890#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1994970#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1994971#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1996676#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1997913#L970 assume 0 == initPersonOnFloor_~floor; 1998573#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1993728#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1996425#L762 assume !(0 == callOnFloor_~floorID); 1996295#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1993591#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2004090#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2004089#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2004088#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2004087#L1367 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1995326#L1377 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1996288#L1388 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1993646#L1399 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1994780#L1410 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1998358#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1998504#L699 assume !(0 == isFloorCalling_~floorID); 1998836#L703 assume !(1 == isFloorCalling_~floorID); 1998837#L707 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1997140#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 1997141#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1999002#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1999003#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2004503#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2004501#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 1999728#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 1999729#L2854 assume !(0 != timeShift_~tmp___9~3); 2004489#L2945 assume !(1 == ~doorState~0); 2004485#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2004481#L2296 assume !(1 == stopRequestedInDirection_~dir); 1998807#L2465 assume !(0 == ~currentFloorID~0); 1998467#L2471 assume ~currentFloorID~0 > 0; 1998359#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1994802#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1994803#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1997121#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1993777#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2010507#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2009819#L2672 assume !(1 == ~currentHeading~0); 2009705#L2682 assume !(0 == ~currentFloorID~0); 2005686#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2005677#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2005674#L1436 assume !(-1 == ~expectedDirection~0); 2005661#L1448 assume !(1 == ~expectedDirection~0); 2005657#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2005656#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2005655#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2005654#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2003738#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2005653#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2011139#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2011137#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2011134#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2011132#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2011133#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2048955#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2060720#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2060718#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2060714#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2060712#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2060711#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2060709#L2854-1 assume !(0 != timeShift_~tmp___9~3); 2060710#L2945-3 assume !(1 == ~doorState~0); 2011108#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2011109#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 2011103#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2010951#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2177519#L2953-1 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2012168#L2727-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2177518#L2732-2 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2177517#L2296-3 assume !(1 == stopRequestedInDirection_~dir); 2062826#L2465-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1999465#L2618-3 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2069791#L2962-1 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2062613#L2672-5 assume !(1 == ~currentHeading~0); 2062607#L2682-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1997585#L2682-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2003746#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2003740#L1436-1 assume !(-1 == ~expectedDirection~0); 2003735#L1448-1 assume !(1 == ~expectedDirection~0); 2003705#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2003699#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2003690#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2003681#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2003682#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2053481#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2070711#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2070709#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2070707#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2049884#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2049885#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2070703#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2070702#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2070700#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2070696#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2070694#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2070693#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2070691#L2854-2 assume !(0 != timeShift_~tmp___9~3); 2070690#L2945-6 assume !(1 == ~doorState~0); 2070688#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2070686#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 1998790#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1994479#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 1994480#L2953-2 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 1995590#L2727-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 1998527#L2732-4 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 1998528#L2296-5 assume !(1 == stopRequestedInDirection_~dir); 1999685#L2465-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1994377#L2618-5 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 1994488#L2962-2 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 1996465#L2672-8 assume !(1 == ~currentHeading~0); 1995961#L2682-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 1995962#L2682-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2020890#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2020887#L1436-2 assume !(-1 == ~expectedDirection~0); 2020885#L1448-2 assume !(1 == ~expectedDirection~0); 2020880#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2020878#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2020873#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2020872#L970-1 assume 0 == initPersonOnFloor_~floor; 2020844#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2020835#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2020709#L762-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2020704#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2020703#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2020702#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2020700#L1305-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 2020698#L1306-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2020699#L2109-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2088556#L2130-33 __utac_acc__Specification3_spec__1_#t~ret22 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret22;havoc __utac_acc__Specification3_spec__1_#t~ret22; 2085760#L1310-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 2082940#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2082899#L699-63 assume !(0 == isFloorCalling_~floorID); 2082897#L703-63 assume !(1 == isFloorCalling_~floorID); 2082821#L707-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2082818#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2082809#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2082810#L2109-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2082804#L2113-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2082803#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2082797#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2082799#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2082793#L2854-3 assume !(0 != timeShift_~tmp___9~3); 2082792#L2945-9 assume !(1 == ~doorState~0); 2082791#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2082789#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 2082788#L2465-6 assume !(0 == ~currentFloorID~0); 2082784#L2471-6 assume ~currentFloorID~0 > 0; 1998322#L2472-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 1998323#L699-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 1996669#L726-69 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 1996670#L2476-6 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2082785#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2134170#L2953-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2134166#L2672-9 assume !(1 == ~currentHeading~0); 2134167#L2682-27 assume !(0 == ~currentFloorID~0); 2082537#L2682-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2133885#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2133881#L1436-3 assume !(-1 == ~expectedDirection~0); 2133877#L1448-3 assume !(1 == ~expectedDirection~0); 2133864#L1449-3 cleanup_~i~0 := 0; 2133849#L188-2 [2019-11-20 05:35:47,740 INFO L796 eck$LassoCheckResult]: Loop: 2133849#L188-2 assume !false; 2133850#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2133841#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2133842#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2133834#L196 assume 1 != cleanup_~tmp___0~0; 2133835#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2133821#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2133822#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 2133756#L2200 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2133757#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2133736#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2133737#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2133726#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2133727#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2133703#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2020593#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2121060#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2121061#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2121066#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2121067#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2133475#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2133476#L699-89 assume !(0 == isFloorCalling_~floorID); 2133467#L703-89 assume !(1 == isFloorCalling_~floorID); 2133464#L707-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2133458#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2133456#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2133454#L2109-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2133450#L2113-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2133444#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2133442#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2133439#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2133437#L2854-4 assume !(0 != timeShift_~tmp___9~3); 2133435#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2133434#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2133432#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 2133431#L2465-8 assume !(0 == ~currentFloorID~0); 2133429#L2471-8 assume ~currentFloorID~0 > 0; 2133428#L2472-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2133427#L699-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2133426#L726-95 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 2133425#L2476-8 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 1994047#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2136492#L2953-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2133954#L2672-12 assume !(1 == ~currentHeading~0); 2133952#L2682-36 assume !(0 == ~currentFloorID~0); 2108523#L2682-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2133884#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2133879#L1436-4 assume !(-1 == ~expectedDirection~0); 2133875#L1448-4 assume !(1 == ~expectedDirection~0); 2133861#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2133849#L188-2 [2019-11-20 05:35:47,740 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:47,740 INFO L82 PathProgramCache]: Analyzing trace with hash 1855264422, now seen corresponding path program 1 times [2019-11-20 05:35:47,740 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:47,740 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2133892308] [2019-11-20 05:35:47,741 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:47,759 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:47,815 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:47,815 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2133892308] [2019-11-20 05:35:47,815 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:47,815 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:35:47,816 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [244521857] [2019-11-20 05:35:47,816 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:35:47,816 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:35:47,816 INFO L82 PathProgramCache]: Analyzing trace with hash 1034859516, now seen corresponding path program 1 times [2019-11-20 05:35:47,817 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:35:47,817 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140396105] [2019-11-20 05:35:47,817 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:35:47,822 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:35:47,896 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:35:47,896 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140396105] [2019-11-20 05:35:47,896 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:35:47,896 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-11-20 05:35:47,896 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [704776924] [2019-11-20 05:35:47,896 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-11-20 05:35:47,897 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:35:47,897 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-11-20 05:35:47,897 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-11-20 05:35:47,897 INFO L87 Difference]: Start difference. First operand 187185 states and 347601 transitions. cyclomatic complexity: 160417 Second operand 7 states. [2019-11-20 05:36:00,453 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:36:00,454 INFO L93 Difference]: Finished difference Result 396794 states and 728700 transitions. [2019-11-20 05:36:00,454 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-11-20 05:36:00,454 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 396794 states and 728700 transitions. [2019-11-20 05:36:02,029 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 98171 [2019-11-20 05:36:04,331 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 396794 states to 396794 states and 728700 transitions. [2019-11-20 05:36:04,331 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 396794 [2019-11-20 05:36:04,514 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 396794 [2019-11-20 05:36:04,514 INFO L73 IsDeterministic]: Start isDeterministic. Operand 396794 states and 728700 transitions. [2019-11-20 05:36:04,637 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:36:04,637 INFO L688 BuchiCegarLoop]: Abstraction has 396794 states and 728700 transitions. [2019-11-20 05:36:04,819 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 396794 states and 728700 transitions. [2019-11-20 05:36:06,797 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 396794 to 265371. [2019-11-20 05:36:06,797 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 265371 states. [2019-11-20 05:36:07,273 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 265371 states to 265371 states and 495392 transitions. [2019-11-20 05:36:07,273 INFO L711 BuchiCegarLoop]: Abstraction has 265371 states and 495392 transitions. [2019-11-20 05:36:07,273 INFO L591 BuchiCegarLoop]: Abstraction has 265371 states and 495392 transitions. [2019-11-20 05:36:07,273 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-11-20 05:36:07,273 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 265371 states and 495392 transitions. [2019-11-20 05:36:08,708 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 66232 [2019-11-20 05:36:08,708 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-11-20 05:36:08,708 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-11-20 05:36:08,712 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:36:08,712 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-11-20 05:36:08,712 INFO L794 eck$LassoCheckResult]: Stem: 2581009#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;~cleanupTimeShifts~0 := 12;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0;call #t~string52.base, #t~string52.offset := #Ultimate.allocOnStack(30);call #t~string53.base, #t~string53.offset := #Ultimate.allocOnStack(9);call #t~string54.base, #t~string54.offset := #Ultimate.allocOnStack(21);call #t~string55.base, #t~string55.offset := #Ultimate.allocOnStack(30);call #t~string56.base, #t~string56.offset := #Ultimate.allocOnStack(9);call #t~string57.base, #t~string57.offset := #Ultimate.allocOnStack(21);call #t~string61.base, #t~string61.offset := #Ultimate.allocOnStack(30);call #t~string62.base, #t~string62.offset := #Ultimate.allocOnStack(9);call #t~string63.base, #t~string63.offset := #Ultimate.allocOnStack(25);call #t~string64.base, #t~string64.offset := #Ultimate.allocOnStack(30);call #t~string65.base, #t~string65.offset := #Ultimate.allocOnStack(9);call #t~string66.base, #t~string66.offset := #Ultimate.allocOnStack(25);~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;call #t~string113.base, #t~string113.offset := #Ultimate.allocOnStack(10);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string115.base, #t~string115.offset, 1);call write~init~int(95, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(93, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string117.base, #t~string117.offset, 1);call write~init~int(93, #t~string117.base, 1 + #t~string117.offset, 1);call write~init~int(32, #t~string117.base, 2 + #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 3 + #t~string117.offset, 1);call #t~string119.base, #t~string119.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string119.base, #t~string119.offset, 1);call write~init~int(97, #t~string119.base, 1 + #t~string119.offset, 1);call write~init~int(116, #t~string119.base, 2 + #t~string119.offset, 1);call write~init~int(32, #t~string119.base, 3 + #t~string119.offset, 1);call write~init~int(0, #t~string119.base, 4 + #t~string119.offset, 1);call #t~string121.base, #t~string121.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string121.base, #t~string121.offset, 1);call write~init~int(105, #t~string121.base, 1 + #t~string121.offset, 1);call write~init~int(0, #t~string121.base, 2 + #t~string121.offset, 1);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string125.base, #t~string125.offset, 1);call write~init~int(112, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 2 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string127.base, #t~string127.offset, 1);call write~init~int(111, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(119, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(110, #t~string127.base, 3 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 4 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(73, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(76, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(95, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(112, #t~string129.base, 4 + #t~string129.offset, 1);call write~init~int(58, #t~string129.base, 5 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 6 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string131.base, #t~string131.offset, 1);call write~init~int(37, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 2 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 3 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string135.base, #t~string135.offset, 1);call write~init~int(37, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(105, #t~string135.base, 2 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 3 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string137.base, #t~string137.offset, 1);call write~init~int(37, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(105, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 3 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(70, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(95, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(112, #t~string141.base, 3 + #t~string141.offset, 1);call write~init~int(58, #t~string141.base, 4 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 5 + #t~string141.offset, 1);call #t~string144.base, #t~string144.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string144.base, #t~string144.offset, 1);call write~init~int(37, #t~string144.base, 1 + #t~string144.offset, 1);call write~init~int(105, #t~string144.base, 2 + #t~string144.offset, 1);call write~init~int(0, #t~string144.base, 3 + #t~string144.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string150.base, #t~string150.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string150.base, #t~string150.offset, 1);call write~init~int(37, #t~string150.base, 1 + #t~string150.offset, 1);call write~init~int(105, #t~string150.base, 2 + #t~string150.offset, 1);call write~init~int(0, #t~string150.base, 3 + #t~string150.offset, 1);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string153.base, #t~string153.offset, 1);call write~init~int(37, #t~string153.base, 1 + #t~string153.offset, 1);call write~init~int(105, #t~string153.base, 2 + #t~string153.offset, 1);call write~init~int(0, #t~string153.base, 3 + #t~string153.offset, 1);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string156.base, #t~string156.offset, 1);call write~init~int(37, #t~string156.base, 1 + #t~string156.offset, 1);call write~init~int(105, #t~string156.base, 2 + #t~string156.offset, 1);call write~init~int(0, #t~string156.base, 3 + #t~string156.offset, 1);call #t~string158.base, #t~string158.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string158.base, #t~string158.offset, 1);call write~init~int(0, #t~string158.base, 1 + #t~string158.offset, 1); 2581010#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2582730#L1856 havoc valid_product_#res;havoc valid_product_~retValue_acc~12;havoc valid_product_~retValue_acc~12;valid_product_~retValue_acc~12 := 1;valid_product_#res := valid_product_~retValue_acc~12; 2583094#L1864 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2581848#L385 assume 0 != main_~tmp~8; 2581849#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2578966#L692 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2578967#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2580658#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2581872#L970 assume 0 == initPersonOnFloor_~floor; 2582523#L971 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2577741#L1078-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2580420#L762 assume !(0 == callOnFloor_~floorID); 2580284#L765 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2577528#L774-2 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2577529#L2092 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2581952#L2144 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2581953#L1305 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2579398#L1367 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2579317#L1377 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2580279#L1388 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2578896#L1399 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2578783#L1410 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2588014#L1411 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2588013#L699 assume !(0 == isFloorCalling_~floorID); 2588012#L703 assume !(1 == isFloorCalling_~floorID); 2588011#L707 assume !(2 == isFloorCalling_~floorID); 2588009#L711 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2588008#L726 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2588007#L2705 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2588006#L2109-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2588005#L2113-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2588001#L2130-10 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2587999#L2712 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2587998#L2717 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2587996#L2854 assume !(0 != timeShift_~tmp___9~3); 2587995#L2945 assume !(1 == ~doorState~0); 2587994#L2945-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2587992#L2296 assume !(1 == stopRequestedInDirection_~dir); 2587991#L2465 assume !(0 == ~currentFloorID~0); 2587990#L2471 assume ~currentFloorID~0 > 0; 2587989#L2472 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2587988#L699-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2587987#L726-6 stopRequestedInDirection_#t~ret82 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~1 := stopRequestedInDirection_#t~ret82;havoc stopRequestedInDirection_#t~ret82; 2587985#L2476 assume 0 != stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~retValue_acc~21 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2587986#L2618 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2589118#L2953 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2590235#L2672 assume !(1 == ~currentHeading~0); 2590207#L2682 assume !(0 == ~currentFloorID~0); 2590208#L2682-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2590188#L2688-5 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2590189#L1436 assume !(-1 == ~expectedDirection~0); 2590169#L1448 assume !(1 == ~expectedDirection~0); 2590160#L1449 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2590151#L2092-1 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2590152#L2144-3 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2590144#L1305-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2583708#L1367-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2596580#L1377-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2596601#L1388-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2590117#L1399-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2590119#L1410-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2596606#L1411-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2589845#L699-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2589843#L726-21 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2589844#L2705-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2589838#L2109-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2589835#L2130-21 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2589829#L2712-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2589831#L2717-1 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2589824#L2854-1 assume !(0 != timeShift_~tmp___9~3); 2589825#L2945-3 assume !(1 == ~doorState~0); 2589820#L2945-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2589821#L2296-2 assume !(1 == stopRequestedInDirection_~dir); 2589812#L2465-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2589712#L2618-2 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2590879#L2953-1 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2589695#L2727-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2590342#L2732-2 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2590318#L2296-3 assume !(1 == stopRequestedInDirection_~dir); 2590319#L2465-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2590243#L2618-3 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2590244#L2962-1 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2589700#L2672-5 assume !(1 == ~currentHeading~0); 2589677#L2682-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2587581#L2682-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2587578#L2688-11 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2587576#L1436-1 assume !(-1 == ~expectedDirection~0); 2587574#L1448-1 assume !(1 == ~expectedDirection~0); 2587188#L1449-1 havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2584736#L2092-2 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2584719#L2144-6 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2584706#L1305-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2584707#L1367-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2648783#L1377-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2611166#L1388-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2611168#L1399-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2651613#L1410-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2653289#L1411-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2653667#L699-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2609469#L726-42 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2609444#L2705-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2609446#L2109-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2707628#L2130-32 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2707627#L2712-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2707626#L2717-2 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2707625#L2854-2 assume !(0 != timeShift_~tmp___9~3); 2707624#L2945-6 assume !(1 == ~doorState~0); 2707623#L2945-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2707622#L2296-4 assume !(1 == stopRequestedInDirection_~dir); 2620217#L2465-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2620166#L2618-4 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2662207#L2953-2 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2620244#L2727-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2660248#L2732-4 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2654487#L2296-5 assume !(1 == stopRequestedInDirection_~dir); 2654445#L2465-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2654437#L2618-5 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2654438#L2962-2 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2654427#L2672-8 assume !(1 == ~currentHeading~0); 2654412#L2682-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2631085#L2682-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2605560#L2688-17 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2605558#L1436-2 assume !(-1 == ~expectedDirection~0); 2605557#L1448-2 assume !(1 == ~expectedDirection~0); 2605551#L1449-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2605549#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2605544#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2605542#L970-1 assume 0 == initPersonOnFloor_~floor; 2603526#L971-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2603519#L1078-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2603518#L762-2 assume !(0 == callOnFloor_~floorID); 2603508#L765-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2603506#L774-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2603505#L2092-3 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2603504#L2144-9 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2603350#L1305-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2603351#L1367-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2629412#L1377-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2629429#L1388-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2609241#L1399-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2609242#L1410-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2629385#L1411-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2629383#L699-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2606349#L726-63 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2606350#L2705-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2606345#L2109-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2606341#L2130-43 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2606335#L2712-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2606337#L2717-3 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2606329#L2854-3 assume !(0 != timeShift_~tmp___9~3); 2606331#L2945-9 assume !(1 == ~doorState~0); 2606325#L2945-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2606326#L2296-6 assume !(1 == stopRequestedInDirection_~dir); 2606323#L2465-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2606284#L2618-6 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2787349#L2953-3 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2612813#L2727-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2787348#L2732-6 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2787338#L2296-7 assume !(1 == stopRequestedInDirection_~dir); 2787306#L2465-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2787294#L2618-7 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2787218#L2962-3 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2787135#L2672-11 assume !(1 == ~currentHeading~0); 2787134#L2682-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2768573#L2682-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2605865#L2688-23 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2605862#L1436-3 assume !(-1 == ~expectedDirection~0); 2605860#L1448-3 assume !(1 == ~expectedDirection~0); 2605822#L1449-3 cleanup_~i~0 := 0; 2605812#L188-2 [2019-11-20 05:36:08,713 INFO L796 eck$LassoCheckResult]: Loop: 2605812#L188-2 assume !false; 2605803#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2605797#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2605790#L1963 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2605731#L196 assume 1 != cleanup_~tmp___0~0; 2603272#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret75, isIdle_~retValue_acc~20, isIdle_~tmp~17;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~17;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret70, anyStopRequested_#t~ret71, anyStopRequested_#t~ret72, anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~16, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~16;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2603273#L699-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2603211#L726-84 anyStopRequested_#t~ret70 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret70;havoc anyStopRequested_#t~ret70; 2603212#L2200 assume !(0 != anyStopRequested_~tmp___3~1); 2605685#L2204 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2606233#L699-85 assume !(0 == isFloorCalling_~floorID); 2606228#L703-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2606222#L726-85 anyStopRequested_#t~ret71 := isFloorCalling_#res;anyStopRequested_~tmp___2~2 := anyStopRequested_#t~ret71;havoc anyStopRequested_#t~ret71; 2606216#L2211 assume 0 != anyStopRequested_~tmp___2~2;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2606208#L2264 isIdle_#t~ret75 := anyStopRequested_#res;isIdle_~tmp~17 := isIdle_#t~ret75;havoc isIdle_#t~ret75;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~17 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2606207#L2277 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2606206#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret102, timeShift_#t~ret103, timeShift_#t~ret104, timeShift_#t~ret105, timeShift_#t~ret106, timeShift_#t~ret107, timeShift_#t~ret108, timeShift_#t~ret109, timeShift_#t~ret110, timeShift_#t~ret111, timeShift_#t~ret112, timeShift_~tmp~22, timeShift_~tmp___0~10, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~22;havoc timeShift_~tmp___0~10;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret20, __utac_acc__Specification3_spec__1_#t~ret21, __utac_acc__Specification3_spec__1_#t~ret22, __utac_acc__Specification3_spec__1_#t~ret23, __utac_acc__Specification3_spec__1_#t~ret24, __utac_acc__Specification3_spec__1_#t~ret25, __utac_acc__Specification3_spec__1_#t~ret26, __utac_acc__Specification3_spec__1_#t~ret27, __utac_acc__Specification3_spec__1_#t~ret28, __utac_acc__Specification3_spec__1_#t~ret29, __utac_acc__Specification3_spec__1_#t~ret30, __utac_acc__Specification3_spec__1_#t~ret31, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~11, __utac_acc__Specification3_spec__1_~tmp___0~4, __utac_acc__Specification3_spec__1_~tmp___1~3, __utac_acc__Specification3_spec__1_~tmp___2~1, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~11;havoc __utac_acc__Specification3_spec__1_~tmp___0~4;havoc __utac_acc__Specification3_spec__1_~tmp___1~3;havoc __utac_acc__Specification3_spec__1_~tmp___2~1;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2606205#L2092-4 __utac_acc__Specification3_spec__1_#t~ret20 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~11 := __utac_acc__Specification3_spec__1_#t~ret20;havoc __utac_acc__Specification3_spec__1_#t~ret20;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~11;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2606204#L2144-12 __utac_acc__Specification3_spec__1_#t~ret21 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret21;havoc __utac_acc__Specification3_spec__1_#t~ret21; 2606202#L1305-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2606203#L1367-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2769392#L1377-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2769390#L1388-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2769388#L1399-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2769387#L1410-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2769382#L1411-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret88, stopRequestedAtCurrentFloor_#t~ret89, stopRequestedAtCurrentFloor_~retValue_acc~23, stopRequestedAtCurrentFloor_~tmp~20, stopRequestedAtCurrentFloor_~tmp___0~8;havoc stopRequestedAtCurrentFloor_~retValue_acc~23;havoc stopRequestedAtCurrentFloor_~tmp~20;havoc stopRequestedAtCurrentFloor_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~5;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~5; 2769380#L699-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~5 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~5; 2612956#L726-89 stopRequestedAtCurrentFloor_#t~ret88 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~8 := stopRequestedAtCurrentFloor_#t~ret88;havoc stopRequestedAtCurrentFloor_#t~ret88; 2612955#L2705-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~8);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2612954#L2109-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2612950#L2130-54 stopRequestedAtCurrentFloor_#t~ret89 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~20 := stopRequestedAtCurrentFloor_#t~ret89;havoc stopRequestedAtCurrentFloor_#t~ret89; 2612944#L2712-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~20);stopRequestedAtCurrentFloor_~retValue_acc~23 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~23; 2612946#L2717-4 timeShift_#t~ret102 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret102;havoc timeShift_#t~ret102; 2612939#L2854-4 assume !(0 != timeShift_~tmp___9~3); 2612940#L2945-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2612934#L2945-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2612935#L2296-8 assume !(1 == stopRequestedInDirection_~dir); 2612932#L2465-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2612865#L2618-8 timeShift_#t~ret109 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret109;havoc timeShift_#t~ret109; 2787290#L2953-4 assume !(0 != timeShift_~tmp___8~3);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~24;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~24; 2612850#L2727-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~24 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~24; 2787289#L2732-8 timeShift_#t~ret110 := getReverseHeading_#res;timeShift_~tmp___6~3 := timeShift_#t~ret110;havoc timeShift_#t~ret110;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~3, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret76, stopRequestedInDirection_#t~ret77, stopRequestedInDirection_#t~ret78, stopRequestedInDirection_#t~ret79, stopRequestedInDirection_#t~ret80, stopRequestedInDirection_#t~ret81, stopRequestedInDirection_#t~ret82, stopRequestedInDirection_#t~ret83, stopRequestedInDirection_#t~ret84, stopRequestedInDirection_#t~ret85, stopRequestedInDirection_#t~ret86, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~21, stopRequestedInDirection_~tmp~18, stopRequestedInDirection_~tmp___0~7, stopRequestedInDirection_~tmp___1~5, stopRequestedInDirection_~tmp___2~3, stopRequestedInDirection_~tmp___3~2, stopRequestedInDirection_~tmp___4~1, stopRequestedInDirection_~tmp___5~1, stopRequestedInDirection_~tmp___6~1, stopRequestedInDirection_~tmp___7~1, stopRequestedInDirection_~tmp___8~1, stopRequestedInDirection_~tmp___9~1;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~21;havoc stopRequestedInDirection_~tmp~18;havoc stopRequestedInDirection_~tmp___0~7;havoc stopRequestedInDirection_~tmp___1~5;havoc stopRequestedInDirection_~tmp___2~3;havoc stopRequestedInDirection_~tmp___3~2;havoc stopRequestedInDirection_~tmp___4~1;havoc stopRequestedInDirection_~tmp___5~1;havoc stopRequestedInDirection_~tmp___6~1;havoc stopRequestedInDirection_~tmp___7~1;havoc stopRequestedInDirection_~tmp___8~1;havoc stopRequestedInDirection_~tmp___9~1; 2787278#L2296-9 assume !(1 == stopRequestedInDirection_~dir); 2787243#L2465-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~21 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~21; 2787144#L2618-9 timeShift_#t~ret111 := stopRequestedInDirection_#res;timeShift_~tmp___7~3 := timeShift_#t~ret111;havoc timeShift_#t~ret111; 2787145#L2962-4 assume !(0 != timeShift_~tmp___7~3);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret87, continueInDirection_~dir, continueInDirection_~tmp~19;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~19;~currentHeading~0 := continueInDirection_~dir; 2787008#L2672-14 assume !(1 == ~currentHeading~0); 2787007#L2682-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2769021#L2682-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2605937#L2688-29 havoc __utac_acc__Specification3_spec__2_#t~ret32, __utac_acc__Specification3_spec__2_#t~ret33, __utac_acc__Specification3_spec__2_~tmp~12, __utac_acc__Specification3_spec__2_~tmp___0~5;havoc __utac_acc__Specification3_spec__2_~tmp~12;havoc __utac_acc__Specification3_spec__2_~tmp___0~5; 2605922#L1436-4 assume !(-1 == ~expectedDirection~0); 2605859#L1448-4 assume !(1 == ~expectedDirection~0); 2605821#L1449-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2605812#L188-2 [2019-11-20 05:36:08,713 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:36:08,713 INFO L82 PathProgramCache]: Analyzing trace with hash 185317848, now seen corresponding path program 1 times [2019-11-20 05:36:08,713 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:36:08,714 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [757762575] [2019-11-20 05:36:08,714 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:36:08,732 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:36:08,781 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:36:08,782 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [757762575] [2019-11-20 05:36:08,782 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-11-20 05:36:08,782 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-11-20 05:36:08,782 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [995611864] [2019-11-20 05:36:08,783 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-11-20 05:36:08,783 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:36:08,783 INFO L82 PathProgramCache]: Analyzing trace with hash -467514106, now seen corresponding path program 1 times [2019-11-20 05:36:08,783 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-11-20 05:36:08,784 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1793631787] [2019-11-20 05:36:08,784 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-11-20 05:36:08,790 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-11-20 05:36:08,796 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-11-20 05:36:08,834 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-11-20 05:36:09,740 WARN L191 SmtUtils]: Spent 900.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 168 [2019-11-20 05:36:09,982 WARN L191 SmtUtils]: Spent 231.00 ms on a formula simplification that was a NOOP. DAG size: 134 [2019-11-20 05:36:09,990 INFO L210 LassoAnalysis]: Preferences: [2019-11-20 05:36:09,991 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-11-20 05:36:09,991 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-11-20 05:36:09,991 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-11-20 05:36:09,991 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-11-20 05:36:09,992 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:09,992 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-11-20 05:36:09,992 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-11-20 05:36:09,992 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product01.cil.c_Iteration16_Loop [2019-11-20 05:36:09,992 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-11-20 05:36:09,992 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-11-20 05:36:10,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,026 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,031 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,046 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,049 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,074 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,130 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,153 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,178 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,194 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,214 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,216 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,219 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,224 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,227 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,229 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,232 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,240 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,242 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,245 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,247 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,249 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,254 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,257 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,259 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,336 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,339 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,341 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,383 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,415 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,424 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,430 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,432 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,445 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:10,448 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:11,334 WARN L191 SmtUtils]: Spent 238.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2019-11-20 05:36:11,387 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-11-20 05:36:11,387 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,404 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,405 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,413 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,413 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,418 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,418 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,421 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,421 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret103=0} Honda state: {ULTIMATE.start_timeShift_#t~ret103=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,427 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,427 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,432 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,432 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret85=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret85=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,447 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,447 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,452 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,452 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___8~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,480 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,480 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,492 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,492 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret33=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret33=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:11,508 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,508 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,512 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,512 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:11,560 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,560 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,564 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,564 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret76=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,576 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,579 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,583 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,583 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret32=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret32=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,596 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,596 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,600 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,600 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret24=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,613 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,613 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,620 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,620 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___1~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:11,629 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,629 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,636 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,636 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~16=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~16=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:11,649 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,649 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:11,660 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,660 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=0, ~calls_0~0=0, ULTIMATE.start_isFloorCalling_~retValue_acc~5=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~8=0} Honda state: {ULTIMATE.start_isFloorCalling_#res=0, ~calls_0~0=0, ULTIMATE.start_isFloorCalling_~retValue_acc~5=0, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:11,683 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:11,683 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:11,687 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:11,687 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=0} Honda state: {~expectedDirection~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] Forcibly destroying the process No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [MP z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (14)] The stream was forcibly closed: stdIn Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,454 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,454 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,458 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,458 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,471 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,471 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,474 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,474 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret84=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,478 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,479 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,481 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,481 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,486 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,486 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,489 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,489 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___9~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,496 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,496 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,498 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,498 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___2~3=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,504 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,504 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,507 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,507 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret77=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret77=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,516 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,517 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,519 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,520 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret70=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,527 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,527 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,530 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,530 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret104=0} Honda state: {ULTIMATE.start_timeShift_#t~ret104=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,536 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,536 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,539 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,539 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret74=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret74=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,544 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,544 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,548 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,548 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~19=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~19=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,554 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,555 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,558 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,558 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~10=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~10=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,571 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,571 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,577 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,577 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~calls_1~0=4, ULTIMATE.start_anyStopRequested_~tmp___2~2=4} Honda state: {~calls_1~0=4, ULTIMATE.start_anyStopRequested_~tmp___2~2=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,581 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,581 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,584 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,584 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret88=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret88=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,589 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,589 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,593 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,593 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret25=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret25=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,598 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,598 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,602 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,602 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0, ULTIMATE.start_buttonForFloorIsPressed_#in~floorID=0} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_~floorID=0, ULTIMATE.start_buttonForFloorIsPressed_#in~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,606 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,606 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,610 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,610 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#res=0, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#res=0, ULTIMATE.start_stopRequestedInDirection_~retValue_acc~21=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,620 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,620 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,623 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,623 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret111=0} Honda state: {ULTIMATE.start_timeShift_#t~ret111=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,629 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,629 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,635 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,636 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~2=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___3~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,652 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,652 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,656 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,656 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#t~ret75=0} Honda state: {ULTIMATE.start_isIdle_#t~ret75=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,665 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,665 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,669 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,669 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret83=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret83=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,677 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,677 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,681 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,681 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret109=0} Honda state: {ULTIMATE.start_timeShift_#t~ret109=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,688 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,688 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,692 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,692 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___3~4=0} Honda state: {ULTIMATE.start_timeShift_~tmp___3~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,698 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,698 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,702 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,702 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret89=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret89=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,708 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,708 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,712 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,712 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret22=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,721 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,721 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,726 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,726 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,741 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,741 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,745 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,745 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret78=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,756 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,756 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,761 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,761 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret110=0} Honda state: {ULTIMATE.start_timeShift_#t~ret110=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,767 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,767 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,772 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,772 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,784 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,784 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,788 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,789 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret82=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret82=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,797 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,797 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,801 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,801 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~7=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___0~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,809 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,809 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,813 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,814 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___8~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___8~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,823 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,824 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,828 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,828 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret71=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret71=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,834 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,834 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:12,837 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,838 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp___5~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,844 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,844 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,849 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,849 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_timeShift_~tmp___9~3=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#res=0, ULTIMATE.start_timeShift_~tmp___9~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,855 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,855 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,860 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,860 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~retValue_acc~23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,865 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,866 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,869 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,870 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,875 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,875 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,879 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,879 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret23=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,885 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,885 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,889 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,889 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret79=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret79=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,895 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,895 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,899 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,899 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,905 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,905 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,910 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,910 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~tmp~18=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_~tmp~18=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,916 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,916 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,921 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,921 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~20=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp~20=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:12,927 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,927 INFO L160 nArgumentSynthesizer]: Using integer mode. Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,931 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-11-20 05:36:12,932 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret107=0} Honda state: {ULTIMATE.start_timeShift_#t~ret107=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,936 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-11-20 05:36:12,937 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:12,947 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-11-20 05:36:12,947 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-11-20 05:36:13,581 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-11-20 05:36:13,582 INFO L210 LassoAnalysis]: Preferences: [2019-11-20 05:36:13,582 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-11-20 05:36:13,582 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-11-20 05:36:13,582 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-11-20 05:36:13,583 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-11-20 05:36:13,583 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:13,583 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-11-20 05:36:13,583 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-11-20 05:36:13,583 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product01.cil.c_Iteration16_Loop [2019-11-20 05:36:13,583 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-11-20 05:36:13,583 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-11-20 05:36:13,587 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,591 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,594 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,596 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,598 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,600 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,602 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,604 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,606 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,608 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,616 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,618 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,621 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,623 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,625 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,626 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,628 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,630 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,631 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,633 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,635 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,637 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,638 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,640 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,642 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,649 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,661 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,662 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,664 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,681 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,685 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,698 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,700 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,708 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,712 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,717 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,719 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,725 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,726 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,734 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,741 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,751 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,754 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,757 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,771 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,774 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,776 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,780 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,783 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,786 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,789 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,797 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,799 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,802 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,805 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,808 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,811 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,813 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,816 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,819 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,822 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,824 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,827 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,830 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,861 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,872 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,874 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,877 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,884 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,886 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,889 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,891 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,900 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,902 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,911 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,954 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,985 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:13,988 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:14,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:14,015 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:14,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-11-20 05:36:14,642 WARN L191 SmtUtils]: Spent 154.00 ms on a formula simplification that was a NOOP. DAG size: 14 [2019-11-20 05:36:15,082 WARN L191 SmtUtils]: Spent 198.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2019-11-20 05:36:15,104 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-11-20 05:36:15,110 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,114 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,116 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,116 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,116 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,116 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,116 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,118 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,118 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,121 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,133 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,134 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,135 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,135 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,135 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,135 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,136 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,136 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,143 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,156 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,159 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,159 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,159 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,159 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,159 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,161 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,161 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,163 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,172 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,174 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,174 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,174 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,174 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,174 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,175 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,175 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,177 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,184 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,186 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,186 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,186 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,186 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,186 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,187 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,187 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,189 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,197 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,199 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,199 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,199 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,199 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,199 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,201 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,201 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,203 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,209 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,211 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,211 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,211 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,211 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,211 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,212 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,213 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,214 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,225 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,227 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,227 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,227 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,228 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,228 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,229 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,229 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,231 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,241 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,242 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,243 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,243 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,243 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,243 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,244 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,244 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,246 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,252 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,254 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,255 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,255 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,255 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,255 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,260 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,260 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,264 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,273 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,275 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,275 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,275 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,275 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,275 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,276 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,276 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,280 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,289 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,290 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,290 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,290 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,290 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,290 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,291 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,291 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,292 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,296 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,298 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,298 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,298 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,298 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,298 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,299 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,299 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,300 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,304 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,306 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,306 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,306 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,306 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,306 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,307 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,307 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,308 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,312 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false Waiting until toolchain timeout for monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,314 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,314 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,314 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,314 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,314 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,315 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,315 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,316 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,320 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,321 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,322 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,322 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,322 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,322 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,322 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,322 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,324 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,328 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,329 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,330 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,330 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,330 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,330 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,330 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,330 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,332 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,341 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,342 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,342 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,343 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,343 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,343 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,343 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,343 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,345 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,351 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false Waiting until toolchain timeout for monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,353 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,353 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,353 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,353 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,353 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,353 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,354 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,355 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,359 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,361 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,361 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,361 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,361 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,361 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,361 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,362 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,363 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,368 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,369 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,369 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,369 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,370 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,370 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,370 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,370 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,371 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,375 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,377 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,377 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,377 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,377 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,377 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,378 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,378 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,379 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,383 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,385 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,385 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,385 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,385 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,385 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,386 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,386 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,387 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,392 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,394 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,394 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,394 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,394 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,394 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,395 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,395 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,398 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,403 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,404 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,404 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,404 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,404 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,405 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,405 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,405 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,406 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,410 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,412 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,412 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,412 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,412 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,412 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,413 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,413 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,415 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,420 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,421 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,421 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,422 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,422 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,422 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,422 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,422 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,424 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,429 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,430 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,430 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,430 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,430 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,430 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,431 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,431 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,432 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,437 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,438 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,438 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,439 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,439 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,439 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,439 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,439 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,440 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,447 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,448 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,448 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,448 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,448 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,448 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,449 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,449 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,450 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,455 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,456 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,457 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,457 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,457 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,457 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,458 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,458 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,462 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,466 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,468 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,468 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,468 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,468 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,468 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,468 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,468 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,470 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,474 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,475 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,475 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,475 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,475 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,475 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,476 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,476 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,477 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,481 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,482 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,482 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,482 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,482 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,482 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,483 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,483 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,485 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,489 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,490 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,491 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,491 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,491 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,491 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,491 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,492 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,493 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,497 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,498 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,498 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,498 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,498 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,499 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,499 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,500 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,501 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,506 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,507 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,507 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,507 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,507 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,507 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,508 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,508 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,512 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,528 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,530 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,530 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,530 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,530 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,530 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,531 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,531 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,533 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,538 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,540 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,540 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,541 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,541 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,541 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,541 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,541 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,543 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,549 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,550 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,551 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,551 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,551 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,551 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,552 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,552 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. Waiting until toolchain timeout for monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,554 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,559 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,560 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,560 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,560 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,560 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,560 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,561 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,561 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,562 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,566 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,567 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,567 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,568 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,568 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,568 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,568 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,568 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,570 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,574 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,575 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,575 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,575 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,575 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,576 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,576 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,576 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,577 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,581 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,582 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,583 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,583 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,583 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,583 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,583 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,583 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,586 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,590 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,591 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,591 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,591 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,592 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,592 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,593 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,593 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,595 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,600 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,602 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,602 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,602 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,602 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,602 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,603 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,603 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,605 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,629 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,630 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,630 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,631 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,631 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,631 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,631 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,631 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,632 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,636 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,637 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,637 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,637 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,638 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,638 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,638 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,638 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,640 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,643 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,645 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,645 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,645 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,645 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,645 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,646 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,646 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,647 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,651 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,653 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,653 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,653 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,653 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,653 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,653 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,653 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,655 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,659 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,660 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,660 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,660 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,660 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,660 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,661 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,661 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,662 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,666 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,667 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,668 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,668 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,668 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-11-20 05:36:15,668 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,669 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-11-20 05:36:15,669 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,672 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,676 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,677 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,677 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,677 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,677 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,677 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,678 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,678 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,679 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,685 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,686 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,686 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,686 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,686 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,686 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,687 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,687 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,688 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,693 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-11-20 05:36:15,695 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-11-20 05:36:15,695 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-11-20 05:36:15,696 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-11-20 05:36:15,696 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-11-20 05:36:15,696 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-11-20 05:36:15,697 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-11-20 05:36:15,697 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-11-20 05:36:15,699 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-11-20 05:36:15,722 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-11-20 05:36:15,722 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_3365a277-5b12-4cc4-896d-2724a754a74a/bin/uautomizer/z3 Starting monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) [2019-11-20 05:36:15,732 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-11-20 05:36:15,732 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-11-20 05:36:15,733 INFO L510 LassoAnalysis]: Proved termination. [2019-11-20 05:36:15,733 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] Waiting until toolchain timeout for monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-11-20 05:36:15,736 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-11-20 05:36:15,770 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-11-20 05:36:16,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:36:16,045 INFO L255 TraceCheckSpWp]: Trace formula consists of 1162 conjuncts, 2 conjunts are in the unsatisfiable core [2019-11-20 05:36:16,057 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2019-11-20 05:36:16,145 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-11-20 05:36:16,146 INFO L255 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 5 conjunts are in the unsatisfiable core [2019-11-20 05:36:16,153 INFO L278 TraceCheckSpWp]: Computing forward predicates... [2019-11-20 05:36:16,202 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-11-20 05:36:16,209 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2019-11-20 05:36:16,210 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 265371 states and 495392 transitions. cyclomatic complexity: 230022 Second operand 5 states. [2019-11-20 05:36:18,599 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 265371 states and 495392 transitions. cyclomatic complexity: 230022. Second operand 5 states. Result 331603 states and 618601 transitions. Complement of second has 8 states. [2019-11-20 05:36:18,599 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-11-20 05:36:18,600 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-11-20 05:36:18,613 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 9908 transitions. [2019-11-20 05:36:18,615 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9908 transitions. Stem has 170 letters. Loop has 53 letters. [2019-11-20 05:36:18,620 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-20 05:36:18,620 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9908 transitions. Stem has 223 letters. Loop has 53 letters. [2019-11-20 05:36:18,622 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-20 05:36:18,623 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 9908 transitions. Stem has 170 letters. Loop has 106 letters. [2019-11-20 05:36:18,623 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-11-20 05:36:18,624 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 331603 states and 618601 transitions. [2019-11-20 05:36:19,871 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-20 05:36:19,871 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 331603 states to 0 states and 0 transitions. [2019-11-20 05:36:19,871 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-11-20 05:36:19,871 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-11-20 05:36:19,871 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-11-20 05:36:19,871 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:36:19,871 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 05:36:19,871 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 05:36:19,871 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-11-20 05:36:19,872 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-11-20 05:36:19,872 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-11-20 05:36:19,872 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2019-11-20 05:36:19,872 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-11-20 05:36:19,872 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-11-20 05:36:19,872 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-11-20 05:36:19,872 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-11-20 05:36:19,872 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-20 05:36:19,872 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-11-20 05:36:19,872 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-11-20 05:36:19,872 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-11-20 05:36:19,872 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-11-20 05:36:19,873 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-11-20 05:36:19,873 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 05:36:19,873 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 05:36:19,873 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-11-20 05:36:19,873 INFO L424 BuchiCegarLoop]: ======== Iteration 17============ [2019-11-20 05:36:19,873 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-11-20 05:36:19,873 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-11-20 05:36:19,873 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-11-20 05:36:19,879 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 20.11 05:36:19 BoogieIcfgContainer [2019-11-20 05:36:19,879 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-11-20 05:36:19,879 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-11-20 05:36:19,880 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-11-20 05:36:19,880 INFO L275 PluginConnector]: Witness Printer initialized [2019-11-20 05:36:19,880 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 20.11 05:34:27" (3/4) ... [2019-11-20 05:36:19,884 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-11-20 05:36:19,884 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-11-20 05:36:19,885 INFO L168 Benchmark]: Toolchain (without parser) took 125343.98 ms. Allocated memory was 1.0 GB in the beginning and 5.5 GB in the end (delta: 4.5 GB). Free memory was 940.7 MB in the beginning and 1.8 GB in the end (delta: -884.8 MB). Peak memory consumption was 3.6 GB. Max. memory is 11.5 GB. [2019-11-20 05:36:19,885 INFO L168 Benchmark]: CDTParser took 0.25 ms. Allocated memory is still 1.0 GB. Free memory is still 967.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-20 05:36:19,886 INFO L168 Benchmark]: CACSL2BoogieTranslator took 863.39 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 155.7 MB). Free memory was 940.7 MB in the beginning and 1.1 GB in the end (delta: -164.9 MB). Peak memory consumption was 30.0 MB. Max. memory is 11.5 GB. [2019-11-20 05:36:19,886 INFO L168 Benchmark]: Boogie Procedure Inliner took 308.39 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 52.7 MB). Peak memory consumption was 52.7 MB. Max. memory is 11.5 GB. [2019-11-20 05:36:19,886 INFO L168 Benchmark]: Boogie Preprocessor took 404.52 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 52.9 MB). Peak memory consumption was 52.9 MB. Max. memory is 11.5 GB. [2019-11-20 05:36:19,887 INFO L168 Benchmark]: RCFGBuilder took 11544.46 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 207.6 MB). Free memory was 1.0 GB in the beginning and 872.9 MB in the end (delta: 127.2 MB). Peak memory consumption was 424.5 MB. Max. memory is 11.5 GB. [2019-11-20 05:36:19,887 INFO L168 Benchmark]: BuchiAutomizer took 112213.89 ms. Allocated memory was 1.4 GB in the beginning and 5.5 GB in the end (delta: 4.1 GB). Free memory was 872.9 MB in the beginning and 1.8 GB in the end (delta: -952.7 MB). Peak memory consumption was 3.1 GB. Max. memory is 11.5 GB. [2019-11-20 05:36:19,887 INFO L168 Benchmark]: Witness Printer took 4.41 ms. Allocated memory is still 5.5 GB. Free memory is still 1.8 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-11-20 05:36:19,889 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.25 ms. Allocated memory is still 1.0 GB. Free memory is still 967.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 863.39 ms. Allocated memory was 1.0 GB in the beginning and 1.2 GB in the end (delta: 155.7 MB). Free memory was 940.7 MB in the beginning and 1.1 GB in the end (delta: -164.9 MB). Peak memory consumption was 30.0 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 308.39 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.1 GB in the end (delta: 52.7 MB). Peak memory consumption was 52.7 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 404.52 ms. Allocated memory is still 1.2 GB. Free memory was 1.1 GB in the beginning and 1.0 GB in the end (delta: 52.9 MB). Peak memory consumption was 52.9 MB. Max. memory is 11.5 GB. * RCFGBuilder took 11544.46 ms. Allocated memory was 1.2 GB in the beginning and 1.4 GB in the end (delta: 207.6 MB). Free memory was 1.0 GB in the beginning and 872.9 MB in the end (delta: 127.2 MB). Peak memory consumption was 424.5 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 112213.89 ms. Allocated memory was 1.4 GB in the beginning and 5.5 GB in the end (delta: 4.1 GB). Free memory was 872.9 MB in the beginning and 1.8 GB in the end (delta: -952.7 MB). Peak memory consumption was 3.1 GB. Max. memory is 11.5 GB. * Witness Printer took 4.41 ms. Allocated memory is still 5.5 GB. Free memory is still 1.8 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 17 terminating modules (16 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 16 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 112.1s and 17 iterations. TraceHistogramMax:1. Analysis of lassos took 9.7s. Construction of modules took 38.2s. Büchi inclusion checks took 19.8s. Highest rank in rank-based complementation 3. Minimization of det autom 17. Minimization of nondet autom 0. Automata minimization 22.6s AutomataMinimizationTime, 15 MinimizatonAttempts, 381649 StatesRemovedByMinimization, 14 NontrivialMinimizations. Non-live state removal took 15.6s Buchi closure took 1.0s. Biggest automaton had 265371 states and ocurred in iteration 15. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 264538 SDtfs, 485226 SDslu, 402647 SDs, 0 SdLazy, 34574 SolverSat, 3549 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 38.2s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI15 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf348 smp46 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 8ms VariablesStem: 0 VariablesLoop: 2 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 55 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.2s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...