./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 2d9788d6a4230717093c0eac3ed0e0e60c8a17a8 ......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 15:33:32,721 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 15:33:32,723 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 15:33:32,731 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 15:33:32,732 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 15:33:32,732 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 15:33:32,733 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 15:33:32,735 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 15:33:32,736 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 15:33:32,737 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 15:33:32,738 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 15:33:32,739 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 15:33:32,739 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 15:33:32,740 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 15:33:32,740 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 15:33:32,741 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 15:33:32,742 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 15:33:32,743 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 15:33:32,744 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 15:33:32,745 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 15:33:32,746 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 15:33:32,747 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 15:33:32,748 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 15:33:32,748 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 15:33:32,750 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 15:33:32,750 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 15:33:32,750 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 15:33:32,751 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 15:33:32,751 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 15:33:32,752 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 15:33:32,752 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 15:33:32,753 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 15:33:32,753 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 15:33:32,754 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 15:33:32,755 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 15:33:32,755 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 15:33:32,755 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 15:33:32,755 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 15:33:32,756 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 15:33:32,756 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 15:33:32,757 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 15:33:32,757 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-12-07 15:33:32,771 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 15:33:32,771 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 15:33:32,772 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-12-07 15:33:32,772 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-12-07 15:33:32,772 INFO L138 SettingsManager]: * Use SBE=true [2019-12-07 15:33:32,773 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-12-07 15:33:32,773 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-12-07 15:33:32,773 INFO L138 SettingsManager]: * Use old map elimination=false [2019-12-07 15:33:32,773 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-12-07 15:33:32,773 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-12-07 15:33:32,773 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-12-07 15:33:32,774 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 15:33:32,774 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 15:33:32,774 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-12-07 15:33:32,774 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 15:33:32,774 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 15:33:32,774 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 15:33:32,775 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-12-07 15:33:32,775 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-12-07 15:33:32,775 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-12-07 15:33:32,775 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 15:33:32,775 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 15:33:32,775 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-12-07 15:33:32,776 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 15:33:32,776 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-12-07 15:33:32,776 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 15:33:32,776 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 15:33:32,776 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-12-07 15:33:32,777 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 15:33:32,777 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-12-07 15:33:32,777 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 15:33:32,777 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-12-07 15:33:32,778 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-12-07 15:33:32,778 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 2d9788d6a4230717093c0eac3ed0e0e60c8a17a8 [2019-12-07 15:33:32,877 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 15:33:32,887 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 15:33:32,889 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 15:33:32,891 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 15:33:32,891 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 15:33:32,892 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c [2019-12-07 15:33:32,935 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/data/4cf33fc26/e551a1c0b699434f95e89ca1599898f2/FLAG7067cf88f [2019-12-07 15:33:33,423 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 15:33:33,423 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/sv-benchmarks/c/product-lines/elevator_spec3_product21.cil.c [2019-12-07 15:33:33,436 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/data/4cf33fc26/e551a1c0b699434f95e89ca1599898f2/FLAG7067cf88f [2019-12-07 15:33:33,444 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/data/4cf33fc26/e551a1c0b699434f95e89ca1599898f2 [2019-12-07 15:33:33,446 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 15:33:33,447 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 15:33:33,447 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 15:33:33,447 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 15:33:33,449 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 15:33:33,450 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:33,451 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@596a67aa and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33, skipping insertion in model container [2019-12-07 15:33:33,451 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:33,456 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 15:33:33,494 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 15:33:33,806 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:33:33,815 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 15:33:33,891 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:33:33,929 INFO L208 MainTranslator]: Completed translation [2019-12-07 15:33:33,929 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33 WrapperNode [2019-12-07 15:33:33,930 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 15:33:33,930 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 15:33:33,930 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 15:33:33,930 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 15:33:33,936 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:33,957 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,139 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 15:33:34,139 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 15:33:34,139 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 15:33:34,139 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 15:33:34,146 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,146 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,175 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,176 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,265 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,355 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,398 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... [2019-12-07 15:33:34,462 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 15:33:34,463 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 15:33:34,463 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 15:33:34,463 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 15:33:34,463 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:33:34,506 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 15:33:34,507 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-12-07 15:33:34,507 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 15:33:34,507 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 15:33:42,248 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 15:33:42,248 INFO L287 CfgBuilder]: Removed 1897 assume(true) statements. [2019-12-07 15:33:42,252 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:33:42 BoogieIcfgContainer [2019-12-07 15:33:42,252 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 15:33:42,252 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-12-07 15:33:42,252 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-12-07 15:33:42,254 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-12-07 15:33:42,255 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 15:33:42,255 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 07.12 03:33:33" (1/3) ... [2019-12-07 15:33:42,256 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@570c9729 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 03:33:42, skipping insertion in model container [2019-12-07 15:33:42,256 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 15:33:42,256 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:33:33" (2/3) ... [2019-12-07 15:33:42,256 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@570c9729 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 03:33:42, skipping insertion in model container [2019-12-07 15:33:42,256 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 15:33:42,256 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:33:42" (3/3) ... [2019-12-07 15:33:42,258 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product21.cil.c [2019-12-07 15:33:42,287 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-12-07 15:33:42,288 INFO L357 BuchiCegarLoop]: Hoare is false [2019-12-07 15:33:42,288 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-12-07 15:33:42,288 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 15:33:42,288 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 15:33:42,288 INFO L361 BuchiCegarLoop]: Difference is false [2019-12-07 15:33:42,288 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 15:33:42,288 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-12-07 15:33:42,368 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8698 states. [2019-12-07 15:33:42,499 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1757 [2019-12-07 15:33:42,499 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:33:42,499 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:33:42,515 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:42,515 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:42,515 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-12-07 15:33:42,515 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8698 states. [2019-12-07 15:33:42,570 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1757 [2019-12-07 15:33:42,571 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:33:42,571 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:33:42,575 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:42,575 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:42,583 INFO L794 eck$LassoCheckResult]: Stem: 2690#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 8068#L-1true havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1273#L3392true havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1794#L3400true main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 7648#L385true assume 0 != main_~tmp~8; 7816#L358true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4131#L2207true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 4054#L444true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3771#L469true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7322#L2485true assume 0 == initPersonOnFloor_~floor; 7269#L2486true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3188#L2593-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5589#L2277true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8075#L2289-2true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6860#L844true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8306#L896true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8450#L2832true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8325#L2833true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5125#L861true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7933#L882true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7247#L2837true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3528#L2938true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2117#L1525true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6862#L844-1true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5093#L861-10true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7898#L882-10true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3186#L1536true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4170#L1675true assume !(0 != timeShift_~tmp___9~2); 7776#L1766true assume !(1 == ~doorState~0); 7764#L1766-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7297#L1428true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1354#L1449true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5508#L1401true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5567#L1048-2true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5038#L1217-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5955#L1370-2true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8476#L1419true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8409#L1774true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1695#L1463true assume !(1 == ~currentHeading~0); 430#L1473true assume !(0 == ~currentFloorID~0); 434#L1473-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 31#L1479-5true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6695#L2963true assume !(-1 == ~expectedDirection~0); 5147#L2975true assume !(1 == ~expectedDirection~0); 5067#L2976true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6864#L844-2true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8298#L896-3true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8449#L2832-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8327#L2833-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5099#L861-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7905#L882-12true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7325#L2837-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3492#L2938-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2084#L1525-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6948#L844-3true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5074#L861-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8052#L882-22true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3187#L1536-1true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4173#L1675-1true assume !(0 != timeShift_~tmp___9~2); 7762#L1766-3true assume !(1 == ~doorState~0); 7768#L1766-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7304#L1428-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1357#L1449-2true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5516#L1401-2true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5558#L1048-8true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5720#L1217-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5946#L1370-8true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8462#L1419-2true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8410#L1774-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1671#L1463-3true assume !(1 == ~currentHeading~0); 205#L1473-9true assume !(0 == ~currentFloorID~0); 207#L1473-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 25#L1479-11true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6697#L2963-1true assume !(-1 == ~expectedDirection~0); 5121#L2975-1true assume !(1 == ~expectedDirection~0); 5064#L2976-1true havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6950#L844-4true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8303#L896-6true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8446#L2832-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8326#L2833-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5078#L861-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8057#L882-24true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7333#L2837-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3498#L2938-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2085#L1525-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6952#L844-5true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5027#L861-34true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8026#L882-34true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3178#L1536-2true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4154#L1675-2true assume !(0 != timeShift_~tmp___9~2); 7770#L1766-6true assume 1 == ~doorState~0;~doorState~0 := 0; 7862#L1766-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7309#L1428-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1360#L1449-4true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5524#L1401-4true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5549#L1048-14true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5707#L1217-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5939#L1370-14true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8465#L1419-4true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8412#L1774-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1679#L1463-6true assume !(1 == ~currentHeading~0); 201#L1473-18true assume !(0 == ~currentFloorID~0); 185#L1473-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 20#L1479-17true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6702#L2963-2true assume !(-1 == ~expectedDirection~0); 5126#L2975-2true assume !(1 == ~expectedDirection~0); 5018#L2976-2true havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 4056#L444-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3735#L469-1true bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 7299#L2485-1true assume 0 == initPersonOnFloor_~floor; 7195#L2486-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3177#L2593-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5588#L2277-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 8065#L2289-5true havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6954#L844-6true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8292#L896-9true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8447#L2832-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8321#L2833-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5010#L861-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 8004#L882-36true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7336#L2837-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3495#L2938-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2090#L1525-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6958#L844-7true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 5008#L861-46true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7981#L882-46true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3179#L1536-3true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4157#L1675-3true assume !(0 != timeShift_~tmp___9~2); 7866#L1766-9true assume !(1 == ~doorState~0); 7868#L1766-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7289#L1428-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1348#L1449-6true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5495#L1401-6true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5509#L1048-20true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5693#L1217-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5935#L1370-20true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8469#L1419-6true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8411#L1774-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1657#L1463-9true assume !(1 == ~currentHeading~0); 180#L1473-27true assume !(0 == ~currentFloorID~0); 159#L1473-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 14#L1479-23true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6706#L2963-3true assume !(-1 == ~expectedDirection~0); 5135#L2975-3true assume !(1 == ~expectedDirection~0); 5023#L2976-3true cleanup_~i~0 := 0; 8419#L188-2true [2019-12-07 15:33:42,584 INFO L796 eck$LassoCheckResult]: Loop: 8419#L188-2true assume !false; 8451#L189true cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 8404#L192true assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 5744#L691true cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 7204#L196true assume 1 != cleanup_~tmp___0~0; 7202#L196-1true havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2636#L2214-244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 6104#L2241-244true anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 67#L952true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 6055#L1016true isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 6644#L1029true cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 7576#L208true assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6935#L844-8true __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 8402#L896-12true __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 8448#L2832-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 8322#L2833-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 4999#L861-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7985#L882-48true __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 7316#L2837-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 3504#L2938-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2093#L1525-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 6938#L844-9true stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 4991#L861-58true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 7970#L882-58true stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3180#L1536-4true timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 4160#L1675-4true assume !(0 != timeShift_~tmp___9~2); 7869#L1766-12true assume !(1 == ~doorState~0); 7856#L1766-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 7293#L1428-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1351#L1449-8true stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 5501#L1401-8true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 5497#L1048-26true assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 5683#L1217-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 5928#L1370-26true stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 8454#L1419-8true timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 8413#L1774-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1664#L1463-12true assume !(1 == ~currentHeading~0); 138#L1473-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 146#L1473-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 8#L1479-29true havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 6704#L2963-4true assume !(-1 == ~expectedDirection~0); 5131#L2975-4true assume !(1 == ~expectedDirection~0); 5028#L2976-4true cleanup_~i~0 := 1 + cleanup_~i~0; 8419#L188-2true [2019-12-07 15:33:42,588 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:33:42,589 INFO L82 PathProgramCache]: Analyzing trace with hash 1722019930, now seen corresponding path program 1 times [2019-12-07 15:33:42,595 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:33:42,596 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1135213452] [2019-12-07 15:33:42,596 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:33:42,727 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:33:42,869 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:33:42,870 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1135213452] [2019-12-07 15:33:42,870 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:33:42,871 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:33:42,871 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [198856943] [2019-12-07 15:33:42,875 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:33:42,875 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:33:42,875 INFO L82 PathProgramCache]: Analyzing trace with hash 613728287, now seen corresponding path program 1 times [2019-12-07 15:33:42,875 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:33:42,876 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [6197153] [2019-12-07 15:33:42,876 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:33:42,888 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:33:42,936 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:33:42,937 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [6197153] [2019-12-07 15:33:42,937 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:33:42,937 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:33:42,937 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1858520674] [2019-12-07 15:33:42,939 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:33:42,940 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:33:42,953 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:33:42,954 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:33:42,955 INFO L87 Difference]: Start difference. First operand 8698 states. Second operand 7 states. [2019-12-07 15:33:50,069 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:33:50,069 INFO L93 Difference]: Finished difference Result 27536 states and 51721 transitions. [2019-12-07 15:33:50,070 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-12-07 15:33:50,073 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 27536 states and 51721 transitions. [2019-12-07 15:33:50,275 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6204 [2019-12-07 15:33:50,438 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 27536 states to 27432 states and 51600 transitions. [2019-12-07 15:33:50,439 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 27432 [2019-12-07 15:33:50,463 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 27432 [2019-12-07 15:33:50,464 INFO L73 IsDeterministic]: Start isDeterministic. Operand 27432 states and 51600 transitions. [2019-12-07 15:33:50,501 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:33:50,501 INFO L688 BuchiCegarLoop]: Abstraction has 27432 states and 51600 transitions. [2019-12-07 15:33:50,537 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 27432 states and 51600 transitions. [2019-12-07 15:33:50,751 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 27432 to 13730. [2019-12-07 15:33:50,752 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13730 states. [2019-12-07 15:33:50,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13730 states to 13730 states and 25850 transitions. [2019-12-07 15:33:50,770 INFO L711 BuchiCegarLoop]: Abstraction has 13730 states and 25850 transitions. [2019-12-07 15:33:50,770 INFO L591 BuchiCegarLoop]: Abstraction has 13730 states and 25850 transitions. [2019-12-07 15:33:50,771 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-12-07 15:33:50,771 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13730 states and 25850 transitions. [2019-12-07 15:33:50,802 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3039 [2019-12-07 15:33:50,802 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:33:50,802 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:33:50,805 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:50,805 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:50,806 INFO L794 eck$LassoCheckResult]: Stem: 40299#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 40300#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 38227#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 38228#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 38770#L385 assume 0 != main_~tmp~8; 44644#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 41525#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 41383#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 39609#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 41251#L2485 assume 0 == initPersonOnFloor_~floor; 44347#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 36967#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 40844#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42625#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 43940#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 43941#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45137#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 45154#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 42325#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42326#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 44307#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 36922#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39325#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 39326#L2214 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 39214#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 40818#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 41465#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40840#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40841#L1675 assume !(0 != timeShift_~tmp___9~2); 41579#L1766 assume !(1 == ~doorState~0); 44695#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 44370#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 38318#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 38319#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 42985#L1048-2 assume 1 == stopRequestedInDirection__wrappee__weight_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~22;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~22;isTopFloor_~retValue_acc~22 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~22; 43046#L2788-2 stopRequestedInDirection__wrappee__weight_#t~ret28 := isTopFloor_#res;stopRequestedInDirection__wrappee__weight_~tmp~15 := stopRequestedInDirection__wrappee__weight_#t~ret28;havoc stopRequestedInDirection__wrappee__weight_#t~ret28; 43860#L1052-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp~15;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 36770#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 43358#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 45180#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 38693#L1463 assume !(1 == ~currentHeading~0); 37013#L1473 assume !(0 == ~currentFloorID~0); 37014#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36757#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 47091#L2963 assume !(-1 == ~expectedDirection~0); 47088#L2975 assume !(1 == ~expectedDirection~0); 47086#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 47085#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 47084#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 47083#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 47082#L2894-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 47081#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 42093#L2915-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40656#L2926-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40657#L2937-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37054#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39241#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39243#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43946#L861-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42585#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 48188#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 48186#L1675-1 assume !(0 != timeShift_~tmp___9~2); 48185#L1766-3 assume !(1 == ~doorState~0); 48184#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48183#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48178#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48176#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48177#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 49575#L1217-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 49570#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 49568#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 49566#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 49567#L1463-3 assume !(1 == ~currentHeading~0); 49717#L1473-9 assume !(0 == ~currentFloorID~0); 36761#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36333#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36334#L2963-1 assume !(-1 == ~expectedDirection~0); 42318#L2975-1 assume !(1 == ~expectedDirection~0); 42320#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 45307#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 45306#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45305#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37572#L2894-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37574#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41807#L2915-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40662#L2926-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40664#L2937-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37059#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39244#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39246#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43948#L861-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42554#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40824#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40825#L1675-2 assume !(0 != timeShift_~tmp___9~2); 41559#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 48085#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48083#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48079#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48077#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48076#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 48049#L1217-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 48035#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 48032#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 48031#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 38673#L1463-6 assume !(1 == ~currentHeading~0); 38674#L1473-18 assume !(0 == ~currentFloorID~0); 36718#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36319#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36320#L2963-2 assume !(-1 == ~expectedDirection~0); 42328#L2975-2 assume !(1 == ~expectedDirection~0); 42160#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 41386#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 39616#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 41240#L2485-1 assume 0 == initPersonOnFloor_~floor; 44268#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 36950#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 40823#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 42588#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 45330#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 45329#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45328#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37566#L2894-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37568#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41809#L2915-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40659#L2926-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40661#L2937-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37050#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39256#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39258#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43951#L861-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42845#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40826#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40827#L1675-3 assume !(0 != timeShift_~tmp___9~2); 41562#L1766-9 assume !(1 == ~doorState~0); 48028#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 48025#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 48017#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 48014#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 48015#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 48164#L1217-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 48165#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 45218#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 45219#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 47951#L1463-9 assume !(1 == ~currentHeading~0); 47950#L1473-27 assume !(0 == ~currentFloorID~0); 36665#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36302#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36303#L2963-3 assume !(-1 == ~expectedDirection~0); 42344#L2975-3 assume !(1 == ~expectedDirection~0); 42167#L2976-3 cleanup_~i~0 := 0; 42168#L188-2 [2019-12-07 15:33:50,806 INFO L796 eck$LassoCheckResult]: Loop: 42168#L188-2 assume !false; 45192#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 45178#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 43136#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 43137#L196 assume 1 != cleanup_~tmp___0~0; 44279#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 40247#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 39283#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 36457#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 36458#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 43439#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 43762#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 43943#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 43944#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 45177#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 37575#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 37576#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 41803#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 40668#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 40670#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 37052#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 39264#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 39266#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 43945#L861-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 42797#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 40828#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 40829#L1675-4 assume !(0 != timeShift_~tmp___9~2); 41565#L1766-12 assume !(1 == ~doorState~0); 47990#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 47986#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 47982#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 47980#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 47974#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 47972#L1217-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 0;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 36632#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 43348#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 47095#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 47094#L1463-12 assume !(1 == ~currentHeading~0); 47093#L1473-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 36626#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 36285#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 36286#L2963-4 assume !(-1 == ~expectedDirection~0); 42337#L2975-4 assume !(1 == ~expectedDirection~0); 42175#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 42168#L188-2 [2019-12-07 15:33:50,807 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:33:50,807 INFO L82 PathProgramCache]: Analyzing trace with hash 1044669180, now seen corresponding path program 1 times [2019-12-07 15:33:50,807 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:33:50,807 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2072483081] [2019-12-07 15:33:50,807 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:33:50,832 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:33:50,888 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:33:50,889 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2072483081] [2019-12-07 15:33:50,889 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:33:50,889 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:33:50,889 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [571445547] [2019-12-07 15:33:50,890 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:33:50,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:33:50,890 INFO L82 PathProgramCache]: Analyzing trace with hash -205289530, now seen corresponding path program 1 times [2019-12-07 15:33:50,890 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:33:50,890 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1591560855] [2019-12-07 15:33:50,891 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:33:50,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:33:50,923 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:33:50,923 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1591560855] [2019-12-07 15:33:50,923 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:33:50,923 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:33:50,923 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [978731860] [2019-12-07 15:33:50,924 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:33:50,924 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:33:50,924 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:33:50,924 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:33:50,924 INFO L87 Difference]: Start difference. First operand 13730 states and 25850 transitions. cyclomatic complexity: 12121 Second operand 5 states. [2019-12-07 15:33:51,831 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:33:51,831 INFO L93 Difference]: Finished difference Result 21693 states and 40682 transitions. [2019-12-07 15:33:51,832 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 15:33:51,832 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 21693 states and 40682 transitions. [2019-12-07 15:33:51,891 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5117 [2019-12-07 15:33:51,950 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 21693 states to 21693 states and 40682 transitions. [2019-12-07 15:33:51,950 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 21693 [2019-12-07 15:33:51,963 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 21693 [2019-12-07 15:33:51,963 INFO L73 IsDeterministic]: Start isDeterministic. Operand 21693 states and 40682 transitions. [2019-12-07 15:33:51,977 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:33:51,977 INFO L688 BuchiCegarLoop]: Abstraction has 21693 states and 40682 transitions. [2019-12-07 15:33:52,001 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 21693 states and 40682 transitions. [2019-12-07 15:33:52,147 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 21693 to 13775. [2019-12-07 15:33:52,147 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13775 states. [2019-12-07 15:33:52,164 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13775 states to 13775 states and 25895 transitions. [2019-12-07 15:33:52,165 INFO L711 BuchiCegarLoop]: Abstraction has 13775 states and 25895 transitions. [2019-12-07 15:33:52,165 INFO L591 BuchiCegarLoop]: Abstraction has 13775 states and 25895 transitions. [2019-12-07 15:33:52,165 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-12-07 15:33:52,165 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13775 states and 25895 transitions. [2019-12-07 15:33:52,192 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3049 [2019-12-07 15:33:52,192 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:33:52,192 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:33:52,196 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:52,196 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:33:52,197 INFO L794 eck$LassoCheckResult]: Stem: 75748#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 75749#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 73680#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 73681#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 74220#L385 assume 0 != main_~tmp~8; 80132#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 77000#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 76857#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75060#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76725#L2485 assume 0 == initPersonOnFloor_~floor; 79823#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72409#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 76308#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78085#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 79422#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79423#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80588#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80605#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77786#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77787#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79784#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72363#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74777#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74778#L2214 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74667#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 76282#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76940#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76304#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76305#L1675 assume !(0 != timeShift_~tmp___9~2); 77057#L1766 assume !(1 == ~doorState~0); 80175#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79846#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73769#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73770#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78446#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 77659#L1217-2 assume !(0 == ~currentFloorID~0); 77660#L1223-2 assume !(~currentFloorID~0 > 0); 78175#L1238-2 assume ~currentFloorID~0 > 0; 80301#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80727#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72203#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 80678#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80679#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74143#L1463 assume !(1 == ~currentHeading~0); 72454#L1473 assume !(0 == ~currentFloorID~0); 72455#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71791#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71792#L2963 assume !(-1 == ~expectedDirection~0); 77826#L2975 assume !(1 == ~expectedDirection~0); 77700#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 77701#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79424#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80581#L2832-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80659#L2833-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77744#L861-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77745#L882-12 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79869#L2837-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72496#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74691#L1525-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74692#L2214-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74480#L2241-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77208#L1496-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76911#L1508-1 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76306#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76307#L1675-1 assume !(0 != timeShift_~tmp___9~2); 77062#L1766-3 assume !(1 == ~doorState~0); 80174#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79851#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73774#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73775#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78454#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78503#L1217-8 assume !(0 == ~currentFloorID~0); 78397#L1223-8 assume !(~currentFloorID~0 > 0); 78398#L1238-8 assume ~currentFloorID~0 > 0; 80283#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80723#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72148#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78801#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80667#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74110#L1463-3 assume !(1 == ~currentHeading~0); 72193#L1473-9 assume !(0 == ~currentFloorID~0); 72194#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71774#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71775#L2963-1 assume !(-1 == ~expectedDirection~0); 77780#L2975-1 assume !(1 == ~expectedDirection~0); 77695#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 77696#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 79427#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 80585#L2832-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 80606#L2833-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77715#L861-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77717#L882-24 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79877#L2837-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72928#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 82130#L1525-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 82128#L2214-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 82124#L2241-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 82115#L1496-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 82114#L1508-2 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 82112#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 82106#L1675-2 assume !(0 != timeShift_~tmp___9~2); 80186#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 80187#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79855#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73779#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73780#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78463#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78492#L1217-14 assume !(0 == ~currentFloorID~0); 78347#L1223-14 assume !(~currentFloorID~0 > 0); 78349#L1238-14 assume ~currentFloorID~0 > 0; 80272#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80718#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72128#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78800#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80669#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 80744#L1463-6 assume !(1 == ~currentHeading~0); 72186#L1473-18 assume !(0 == ~currentFloorID~0); 72152#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71760#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71761#L2963-2 assume !(-1 == ~expectedDirection~0); 77789#L2975-2 assume !(1 == ~expectedDirection~0); 77628#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 76860#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 75065#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 76717#L2485-1 assume 0 == initPersonOnFloor_~floor; 79744#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 72391#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 76287#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 78048#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 81463#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 81457#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81454#L2832-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 81455#L2833-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77614#L861-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77615#L882-36 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79881#L2837-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72491#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74706#L1525-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74707#L2214-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74453#L2241-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77213#L1496-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76919#L1508-3 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76290#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76291#L1675-3 assume !(0 != timeShift_~tmp___9~2); 77039#L1766-9 assume !(1 == ~doorState~0); 80339#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79841#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73759#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73760#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78429#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78447#L1217-20 assume !(0 == ~currentFloorID~0); 78332#L1223-20 assume !(~currentFloorID~0 > 0); 78333#L1238-20 assume ~currentFloorID~0 > 0; 80265#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80739#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 72238#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78798#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80912#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 80743#L1463-9 assume !(1 == ~currentHeading~0); 72140#L1473-27 assume !(0 == ~currentFloorID~0); 72101#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71743#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71744#L2963-3 assume !(-1 == ~expectedDirection~0); 77801#L2975-3 assume !(1 == ~expectedDirection~0); 77633#L2976-3 cleanup_~i~0 := 0; 77634#L188-2 [2019-12-07 15:33:52,197 INFO L796 eck$LassoCheckResult]: Loop: 77634#L188-2 assume !false; 80643#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 80634#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 78596#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 78597#L196 assume 1 != cleanup_~tmp___0~0; 79754#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 75695#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74730#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 71898#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 71899#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 78895#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 79244#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 81671#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 81670#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 81668#L2832-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 81667#L2833-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 77597#L861-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 77598#L882-48 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 79861#L2837-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 72493#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 74714#L1525-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 74715#L2214-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 74677#L2241-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 77202#L1496-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 76921#L1508-4 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 76292#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 76293#L1675-4 assume !(0 != timeShift_~tmp___9~2); 77043#L1766-12 assume !(1 == ~doorState~0); 80322#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 79844#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 73764#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 73765#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 78430#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 78431#L1217-26 assume !(0 == ~currentFloorID~0); 78317#L1223-26 assume !(~currentFloorID~0 > 0); 78318#L1238-26 assume ~currentFloorID~0 > 0; 80260#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 80734#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 71902#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 78795#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 80661#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 74101#L1463-12 assume !(1 == ~currentHeading~0); 72064#L1473-36 assume !(0 == ~currentFloorID~0); 72065#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 71726#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 71727#L2963-4 assume !(-1 == ~expectedDirection~0); 77794#L2975-4 assume !(1 == ~expectedDirection~0); 77639#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 77634#L188-2 [2019-12-07 15:33:52,197 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:33:52,197 INFO L82 PathProgramCache]: Analyzing trace with hash 1222042957, now seen corresponding path program 1 times [2019-12-07 15:33:52,198 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:33:52,198 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [573063213] [2019-12-07 15:33:52,198 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:33:52,216 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:33:52,260 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:33:52,261 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [573063213] [2019-12-07 15:33:52,261 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:33:52,261 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:33:52,261 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [574825255] [2019-12-07 15:33:52,262 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:33:52,262 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:33:52,262 INFO L82 PathProgramCache]: Analyzing trace with hash -551793799, now seen corresponding path program 1 times [2019-12-07 15:33:52,262 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:33:52,262 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [636302953] [2019-12-07 15:33:52,262 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:33:52,271 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:33:52,303 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:33:52,303 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [636302953] [2019-12-07 15:33:52,304 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:33:52,304 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 15:33:52,304 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [215022148] [2019-12-07 15:33:52,304 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:33:52,304 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:33:52,304 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 15:33:52,305 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 15:33:52,305 INFO L87 Difference]: Start difference. First operand 13775 states and 25895 transitions. cyclomatic complexity: 12121 Second operand 6 states. [2019-12-07 15:33:59,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:33:59,970 INFO L93 Difference]: Finished difference Result 24876 states and 46385 transitions. [2019-12-07 15:33:59,970 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-12-07 15:33:59,971 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24876 states and 46385 transitions. [2019-12-07 15:34:00,038 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5535 [2019-12-07 15:34:00,097 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24876 states to 24876 states and 46385 transitions. [2019-12-07 15:34:00,097 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24876 [2019-12-07 15:34:00,110 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24876 [2019-12-07 15:34:00,110 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24876 states and 46385 transitions. [2019-12-07 15:34:00,122 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:00,122 INFO L688 BuchiCegarLoop]: Abstraction has 24876 states and 46385 transitions. [2019-12-07 15:34:00,137 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24876 states and 46385 transitions. [2019-12-07 15:34:00,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24876 to 13775. [2019-12-07 15:34:00,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 13775 states. [2019-12-07 15:34:00,256 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 13775 states to 13775 states and 25546 transitions. [2019-12-07 15:34:00,256 INFO L711 BuchiCegarLoop]: Abstraction has 13775 states and 25546 transitions. [2019-12-07 15:34:00,256 INFO L591 BuchiCegarLoop]: Abstraction has 13775 states and 25546 transitions. [2019-12-07 15:34:00,256 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-12-07 15:34:00,256 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 13775 states and 25546 transitions. [2019-12-07 15:34:00,281 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3049 [2019-12-07 15:34:00,281 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:00,281 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:00,285 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:00,285 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:00,285 INFO L794 eck$LassoCheckResult]: Stem: 114438#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 114439#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 112337#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 112338#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 112888#L385 assume 0 != main_~tmp~8; 119075#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 115739#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 115597#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 113729#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 115452#L2485 assume 0 == initPersonOnFloor_~floor; 118742#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 111086#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115028#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116891#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118343#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118344#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119544#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119561#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116595#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116596#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118703#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111041#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 113444#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 113446#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116543#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 116544#L865-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116944#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 115024#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 115025#L1675 assume !(0 != timeShift_~tmp___9~2); 115802#L1766 assume !(1 == ~doorState~0); 119131#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 118765#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 112426#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 112427#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 117245#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 116465#L1217-2 assume !(0 == ~currentFloorID~0); 116466#L1223-2 assume !(~currentFloorID~0 > 0); 116981#L1238-2 assume ~currentFloorID~0 > 0; 119256#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119672#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110886#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 119687#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 119686#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112811#L1463 assume !(1 == ~currentHeading~0); 111132#L1473 assume !(0 == ~currentFloorID~0); 111133#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110471#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110472#L2963 assume !(-1 == ~expectedDirection~0); 116635#L2975 assume !(1 == ~expectedDirection~0); 116506#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 116507#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118345#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119537#L2832-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119563#L2833-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116552#L861-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116553#L882-12 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118789#L2837-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111630#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 119688#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 119689#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 122836#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 122834#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 122818#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 122812#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 122809#L1675-1 assume !(0 != timeShift_~tmp___9~2); 122810#L1766-3 assume !(1 == ~doorState~0); 123979#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123978#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123973#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123971#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123972#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117391#L1217-8 assume !(0 == ~currentFloorID~0); 117196#L1223-8 assume !(~currentFloorID~0 > 0); 117197#L1238-8 assume ~currentFloorID~0 > 0; 119236#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119668#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110831#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 124060#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 124058#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112781#L1463-3 assume !(1 == ~currentHeading~0); 110876#L1473-9 assume !(0 == ~currentFloorID~0); 110877#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110454#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110455#L2963-1 assume !(-1 == ~expectedDirection~0); 116589#L2975-1 assume !(1 == ~expectedDirection~0); 116501#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 116502#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118348#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119541#L2832-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119562#L2833-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116523#L861-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116525#L882-24 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118798#L2837-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111605#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 121742#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 121743#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 121794#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 121793#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 121728#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 121727#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 121720#L1675-2 assume !(0 != timeShift_~tmp___9~2); 121721#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 123654#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123649#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123644#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123634#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123632#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117389#L1217-14 assume !(0 == ~currentFloorID~0); 117147#L1223-14 assume !(~currentFloorID~0 > 0); 117149#L1238-14 assume ~currentFloorID~0 > 0; 119227#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119663#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110938#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123543#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 123540#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112792#L1463-6 assume !(1 == ~currentHeading~0); 110869#L1473-18 assume !(0 == ~currentFloorID~0); 110835#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110440#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110441#L2963-2 assume !(-1 == ~expectedDirection~0); 116598#L2975-2 assume !(1 == ~expectedDirection~0); 116431#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 115600#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 113736#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 115438#L2485-1 assume 0 == initPersonOnFloor_~floor; 118664#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 111069#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 115007#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 116855#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118349#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118350#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119534#L2832-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119607#L2833-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116419#L861-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116420#L882-36 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118802#L2837-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111612#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 121052#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 121053#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 121106#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 121057#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 121039#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 121037#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 121035#L1675-3 assume !(0 != timeShift_~tmp___9~2); 121036#L1766-9 assume !(1 == ~doorState~0); 123726#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123722#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123719#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123718#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 117246#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117247#L1217-20 assume !(0 == ~currentFloorID~0); 117132#L1223-20 assume !(~currentFloorID~0 > 0); 117133#L1238-20 assume ~currentFloorID~0 > 0; 119220#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119684#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110791#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 124059#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 124057#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112763#L1463-9 assume !(1 == ~currentHeading~0); 110823#L1473-27 assume !(0 == ~currentFloorID~0); 110784#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110423#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110424#L2963-3 assume !(-1 == ~expectedDirection~0); 116614#L2975-3 assume !(1 == ~expectedDirection~0); 116438#L2976-3 cleanup_~i~0 := 0; 116439#L188-2 [2019-12-07 15:34:00,286 INFO L796 eck$LassoCheckResult]: Loop: 116439#L188-2 assume !false; 119592#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 119583#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 117396#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 117397#L196 assume 1 != cleanup_~tmp___0~0; 118675#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 114386#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 113402#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 110578#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 110579#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 117754#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 118159#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 118346#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 118347#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 119582#L2832-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 119559#L2833-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 116401#L861-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 116402#L882-48 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 118780#L2837-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 111616#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 119730#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 119731#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 122246#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 122245#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 122228#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 122227#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 122220#L1675-4 assume !(0 != timeShift_~tmp___9~2); 122221#L1766-12 assume !(1 == ~doorState~0); 123653#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 123639#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 123633#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 123630#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 123631#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 117387#L1217-26 assume !(0 == ~currentFloorID~0); 117117#L1223-26 assume !(~currentFloorID~0 > 0); 117118#L1238-26 assume ~currentFloorID~0 > 0; 119215#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 119679#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 110582#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 123461#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 123460#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 112771#L1463-12 assume !(1 == ~currentHeading~0); 110746#L1473-36 assume !(0 == ~currentFloorID~0); 110747#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 110406#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 110407#L2963-4 assume !(-1 == ~expectedDirection~0); 116607#L2975-4 assume !(1 == ~expectedDirection~0); 116447#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 116439#L188-2 [2019-12-07 15:34:00,286 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:00,286 INFO L82 PathProgramCache]: Analyzing trace with hash -435274073, now seen corresponding path program 1 times [2019-12-07 15:34:00,286 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:00,286 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [101749680] [2019-12-07 15:34:00,286 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:00,301 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:00,343 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:00,343 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [101749680] [2019-12-07 15:34:00,343 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:00,343 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:00,344 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [734305790] [2019-12-07 15:34:00,344 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:00,344 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:00,344 INFO L82 PathProgramCache]: Analyzing trace with hash -413829828, now seen corresponding path program 1 times [2019-12-07 15:34:00,344 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:00,344 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1292730358] [2019-12-07 15:34:00,344 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:00,350 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:00,382 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:00,382 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1292730358] [2019-12-07 15:34:00,382 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:00,382 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:34:00,383 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [219665163] [2019-12-07 15:34:00,383 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:00,383 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:00,383 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:34:00,383 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:34:00,383 INFO L87 Difference]: Start difference. First operand 13775 states and 25546 transitions. cyclomatic complexity: 11772 Second operand 7 states. [2019-12-07 15:34:07,989 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:07,989 INFO L93 Difference]: Finished difference Result 37926 states and 70312 transitions. [2019-12-07 15:34:07,990 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-12-07 15:34:07,990 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 37926 states and 70312 transitions. [2019-12-07 15:34:08,098 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 8880 [2019-12-07 15:34:08,191 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 37926 states to 37926 states and 70312 transitions. [2019-12-07 15:34:08,191 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 37926 [2019-12-07 15:34:08,211 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 37926 [2019-12-07 15:34:08,211 INFO L73 IsDeterministic]: Start isDeterministic. Operand 37926 states and 70312 transitions. [2019-12-07 15:34:08,227 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:08,227 INFO L688 BuchiCegarLoop]: Abstraction has 37926 states and 70312 transitions. [2019-12-07 15:34:08,250 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 37926 states and 70312 transitions. [2019-12-07 15:34:08,397 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 37926 to 17507. [2019-12-07 15:34:08,398 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 17507 states. [2019-12-07 15:34:08,420 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 17507 states to 17507 states and 32458 transitions. [2019-12-07 15:34:08,420 INFO L711 BuchiCegarLoop]: Abstraction has 17507 states and 32458 transitions. [2019-12-07 15:34:08,421 INFO L591 BuchiCegarLoop]: Abstraction has 17507 states and 32458 transitions. [2019-12-07 15:34:08,421 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-12-07 15:34:08,421 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 17507 states and 32458 transitions. [2019-12-07 15:34:08,455 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4034 [2019-12-07 15:34:08,455 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:08,456 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:08,459 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:08,459 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:08,459 INFO L794 eck$LassoCheckResult]: Stem: 166108#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 166109#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 164043#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 164044#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 164576#L385 assume 0 != main_~tmp~8; 170421#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 167327#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 167185#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 165422#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167061#L2485 assume 0 == initPersonOnFloor_~floor; 170110#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 162818#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 166649#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 168403#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 169705#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 169706#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 170888#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 170905#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 168102#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168103#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 170071#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 162771#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 165138#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 165139#L2214 assume !(0 == isFloorCalling_~floorID); 167730#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 165029#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 166623#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 167267#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 166645#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 166646#L1675 assume !(0 != timeShift_~tmp___9~2); 167380#L1766 assume !(1 == ~doorState~0); 170460#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170133#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164132#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164133#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168762#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 167970#L1217-2 assume !(0 == ~currentFloorID~0); 167971#L1223-2 assume !(~currentFloorID~0 > 0); 168493#L1238-2 assume ~currentFloorID~0 > 0; 170586#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171016#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162620#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 171031#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 171030#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164499#L1463 assume !(1 == ~currentHeading~0); 162862#L1473 assume !(0 == ~currentFloorID~0); 162863#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162205#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 162206#L2963 assume !(-1 == ~expectedDirection~0); 168144#L2975 assume !(1 == ~expectedDirection~0); 168145#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 176487#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 176486#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 170955#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 163410#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163411#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 170654#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 170655#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 173496#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 173494#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 173495#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 168023#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 168024#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 173484#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 173478#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 173476#L1675-1 assume !(0 != timeShift_~tmp___9~2); 167383#L1766-3 assume !(1 == ~doorState~0); 170459#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170138#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164137#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164138#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168770#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168813#L1217-8 assume !(0 == ~currentFloorID~0); 168714#L1223-8 assume !(~currentFloorID~0 > 0); 168715#L1238-8 assume ~currentFloorID~0 > 0; 170568#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171012#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162564#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 179630#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 179629#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164469#L1463-3 assume !(1 == ~currentHeading~0); 162610#L1473-9 assume !(0 == ~currentFloorID~0); 162611#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162584#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 171738#L2963-1 assume !(-1 == ~expectedDirection~0); 171450#L2975-1 assume !(1 == ~expectedDirection~0); 171433#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171416#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171413#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171410#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171406#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163419#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168010#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 163335#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 162908#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 165053#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 165055#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 169713#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 171350#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168332#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 175705#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 175699#L1675-2 assume !(0 != timeShift_~tmp___9~2); 170471#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 170472#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170142#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164142#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164143#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168778#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168803#L1217-14 assume !(0 == ~currentFloorID~0); 168664#L1223-14 assume !(~currentFloorID~0 > 0); 168666#L1238-14 assume ~currentFloorID~0 > 0; 170557#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171007#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162544#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 179579#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 179578#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164480#L1463-6 assume !(1 == ~currentHeading~0); 162603#L1473-18 assume !(0 == ~currentFloorID~0); 162568#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162174#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 162175#L2963-2 assume !(-1 == ~expectedDirection~0); 168105#L2975-2 assume !(1 == ~expectedDirection~0); 167938#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 167188#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 165425#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 167053#L2485-1 assume 0 == initPersonOnFloor_~floor; 170032#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 162799#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 166628#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 168363#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171919#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171918#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171867#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171818#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 163414#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 170785#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 170786#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 171741#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 171740#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171443#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 167922#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 167923#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 168624#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 166631#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 166632#L1675-3 assume !(0 != timeShift_~tmp___9~2); 167361#L1766-9 assume !(1 == ~doorState~0); 170624#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 170128#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 164122#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 164123#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 168745#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 168763#L1217-20 assume !(0 == ~currentFloorID~0); 168649#L1223-20 assume !(~currentFloorID~0 > 0); 168650#L1238-20 assume ~currentFloorID~0 > 0; 170550#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171028#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162524#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 178616#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 178615#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164451#L1463-9 assume !(1 == ~currentHeading~0); 162556#L1473-27 assume !(0 == ~currentFloorID~0); 162517#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162479#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 178637#L2963-3 assume !(-1 == ~expectedDirection~0); 178630#L2975-3 assume !(1 == ~expectedDirection~0); 178625#L2976-3 cleanup_~i~0 := 0; 178624#L188-2 [2019-12-07 15:34:08,460 INFO L796 eck$LassoCheckResult]: Loop: 178624#L188-2 assume !false; 178623#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 178622#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 178621#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 178620#L196 assume 1 != cleanup_~tmp___0~0; 178619#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 166056#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 165092#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 162312#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 162313#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 169214#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 169528#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171800#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 171799#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 171797#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 171342#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 171341#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 171340#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 171339#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 171313#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 171303#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 171300#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 171291#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 171289#L861-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 171284#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 171283#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 171282#L1675-4 assume !(0 != timeShift_~tmp___9~2); 171280#L1766-12 assume !(1 == ~doorState~0); 171279#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 171263#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 171260#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 171258#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 171241#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 171228#L1217-26 assume !(0 == ~currentFloorID~0); 168634#L1223-26 assume !(~currentFloorID~0 > 0); 168635#L1238-26 assume ~currentFloorID~0 > 0; 170545#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 171023#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 162316#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 178618#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 178617#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 164460#L1463-12 assume !(1 == ~currentHeading~0); 162480#L1473-36 assume !(0 == ~currentFloorID~0); 162481#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 162453#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 178633#L2963-4 assume !(-1 == ~expectedDirection~0); 178628#L2975-4 assume !(1 == ~expectedDirection~0); 178626#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 178624#L188-2 [2019-12-07 15:34:08,460 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:08,460 INFO L82 PathProgramCache]: Analyzing trace with hash -1283546667, now seen corresponding path program 1 times [2019-12-07 15:34:08,461 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:08,461 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [902158659] [2019-12-07 15:34:08,461 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:08,475 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:08,508 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:08,509 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [902158659] [2019-12-07 15:34:08,509 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:08,509 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:08,509 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1010587269] [2019-12-07 15:34:08,509 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:08,509 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:08,510 INFO L82 PathProgramCache]: Analyzing trace with hash 605476013, now seen corresponding path program 1 times [2019-12-07 15:34:08,510 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:08,510 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77868329] [2019-12-07 15:34:08,510 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:08,516 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:08,531 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:08,532 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77868329] [2019-12-07 15:34:08,532 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:08,532 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:34:08,532 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1733884506] [2019-12-07 15:34:08,533 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:08,533 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:08,533 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:34:08,533 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:34:08,533 INFO L87 Difference]: Start difference. First operand 17507 states and 32458 transitions. cyclomatic complexity: 14952 Second operand 5 states. [2019-12-07 15:34:12,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:12,521 INFO L93 Difference]: Finished difference Result 50416 states and 92763 transitions. [2019-12-07 15:34:12,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 15:34:12,522 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 50416 states and 92763 transitions. [2019-12-07 15:34:12,684 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12903 [2019-12-07 15:34:12,805 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 50416 states to 50350 states and 92691 transitions. [2019-12-07 15:34:12,805 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 50350 [2019-12-07 15:34:12,842 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 50350 [2019-12-07 15:34:12,842 INFO L73 IsDeterministic]: Start isDeterministic. Operand 50350 states and 92691 transitions. [2019-12-07 15:34:12,866 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:12,866 INFO L688 BuchiCegarLoop]: Abstraction has 50350 states and 92691 transitions. [2019-12-07 15:34:12,893 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 50350 states and 92691 transitions. [2019-12-07 15:34:13,103 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 50350 to 26326. [2019-12-07 15:34:13,103 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 26326 states. [2019-12-07 15:34:13,140 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 26326 states to 26326 states and 48334 transitions. [2019-12-07 15:34:13,140 INFO L711 BuchiCegarLoop]: Abstraction has 26326 states and 48334 transitions. [2019-12-07 15:34:13,140 INFO L591 BuchiCegarLoop]: Abstraction has 26326 states and 48334 transitions. [2019-12-07 15:34:13,141 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-12-07 15:34:13,141 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 26326 states and 48334 transitions. [2019-12-07 15:34:13,195 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6615 [2019-12-07 15:34:13,196 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:13,196 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:13,199 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:13,199 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:13,200 INFO L794 eck$LassoCheckResult]: Stem: 234076#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 234077#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 232011#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 232012#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 232545#L385 assume 0 != main_~tmp~8; 238477#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 235305#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 235163#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 233384#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 235032#L2485 assume 0 == initPersonOnFloor_~floor; 238188#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 230776#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 234620#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 236399#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 237782#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 237783#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 239006#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 239026#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 236096#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 236097#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 238149#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 230731#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 233097#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 233098#L2214 assume !(0 == isFloorCalling_~floorID); 235715#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 232988#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 234594#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 235245#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234616#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234617#L1675 assume !(0 != timeShift_~tmp___9~2); 235357#L1766 assume !(1 == ~doorState~0); 238526#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238212#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232100#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232101#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236763#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 235968#L1217-2 assume !(0 == ~currentFloorID~0); 235969#L1223-2 assume !(~currentFloorID~0 > 0); 236490#L1238-2 assume ~currentFloorID~0 > 0; 238651#L1240-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239163#L1241-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230570#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 240272#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 240271#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 232468#L1463 assume !(1 == ~currentHeading~0); 230822#L1473 assume !(0 == ~currentFloorID~0); 230823#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230557#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 239269#L2963 assume !(-1 == ~expectedDirection~0); 239266#L2975 assume !(1 == ~expectedDirection~0); 239264#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 239263#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 239261#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 239258#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 239259#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239262#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238715#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 238716#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 244486#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 244485#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 244484#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 236019#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 236020#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 236358#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234618#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234619#L1675-1 assume !(0 != timeShift_~tmp___9~2); 235362#L1766-3 assume !(1 == ~doorState~0); 238525#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238217#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232105#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232106#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236771#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 236811#L1217-8 assume !(0 == ~currentFloorID~0); 236712#L1223-8 assume !(~currentFloorID~0 > 0); 236713#L1238-8 assume ~currentFloorID~0 > 0; 238631#L1240-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239159#L1241-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230635#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 256246#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 256247#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 232438#L1463-3 assume !(1 == ~currentHeading~0); 230560#L1473-9 assume !(0 == ~currentFloorID~0); 230561#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230533#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 240496#L2963-1 assume !(-1 == ~expectedDirection~0); 240493#L2975-1 assume !(1 == ~expectedDirection~0); 240491#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240490#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 240489#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 240488#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 240270#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 231378#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240435#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 240420#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 240411#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 240406#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240401#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 240398#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 240392#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240394#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 241976#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 241970#L1675-2 assume !(0 != timeShift_~tmp___9~2); 235336#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 238537#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238221#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232110#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232111#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236779#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 239274#L1217-14 assume !(0 == ~currentFloorID~0); 236663#L1223-14 assume !(~currentFloorID~0 > 0); 236665#L1238-14 assume ~currentFloorID~0 > 0; 238622#L1240-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239154#L1241-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230492#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 237179#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 239106#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256383#L1463-6 assume !(1 == ~currentHeading~0); 230552#L1473-18 assume !(0 == ~currentFloorID~0); 230517#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230496#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 240560#L2963-2 assume !(-1 == ~expectedDirection~0); 240557#L2975-2 assume !(1 == ~expectedDirection~0); 240555#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 240554#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 240547#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 240546#L2485-1 assume 0 == initPersonOnFloor_~floor; 240529#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 240512#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 240509#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 240506#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240505#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 240504#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 240502#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 240503#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239353#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 240440#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 240428#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 240416#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 240409#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 240405#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 240400#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 240396#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238836#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234602#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234603#L1675-3 assume !(0 != timeShift_~tmp___9~2); 235340#L1766-9 assume !(1 == ~doorState~0); 250515#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 250508#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 250500#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 250494#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 249161#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 239272#L1217-20 assume !(0 == ~currentFloorID~0); 236648#L1223-20 assume !(~currentFloorID~0 > 0); 236649#L1238-20 assume ~currentFloorID~0 > 0; 238615#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239175#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230605#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 250633#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 250634#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256125#L1463-9 assume !(1 == ~currentHeading~0); 230505#L1473-27 assume !(0 == ~currentFloorID~0); 230462#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230422#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 248969#L2963-3 assume !(-1 == ~expectedDirection~0); 248962#L2975-3 assume !(1 == ~expectedDirection~0); 248960#L2976-3 cleanup_~i~0 := 0; 248959#L188-2 [2019-12-07 15:34:13,200 INFO L796 eck$LassoCheckResult]: Loop: 248959#L188-2 assume !false; 248958#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 248957#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 248956#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 248955#L196 assume 1 != cleanup_~tmp___0~0; 248954#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 248951#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 248932#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 248927#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 248913#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 248912#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 248911#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 248910#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 248909#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 248907#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 246202#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 239349#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238824#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 238825#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 248881#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 248879#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 237787#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 237788#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 248877#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 238818#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 234604#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 234605#L1675-4 assume !(0 != timeShift_~tmp___9~2); 235344#L1766-12 assume !(1 == ~doorState~0); 238672#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 238209#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 232095#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 232096#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 236748#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 236749#L1217-26 assume !(0 == ~currentFloorID~0); 236633#L1223-26 assume !(~currentFloorID~0 > 0); 236634#L1238-26 assume ~currentFloorID~0 > 0; 238610#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 239170#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 230258#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 237175#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 256089#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 256088#L1463-12 assume !(1 == ~currentHeading~0); 230424#L1473-36 assume !(0 == ~currentFloorID~0); 230425#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230396#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 248971#L2963-4 assume !(-1 == ~expectedDirection~0); 248966#L2975-4 assume !(1 == ~expectedDirection~0); 248961#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 248959#L188-2 [2019-12-07 15:34:13,200 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:13,200 INFO L82 PathProgramCache]: Analyzing trace with hash -1283546667, now seen corresponding path program 2 times [2019-12-07 15:34:13,201 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:13,201 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1877593792] [2019-12-07 15:34:13,201 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:13,215 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:13,253 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:13,253 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1877593792] [2019-12-07 15:34:13,253 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:13,253 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:13,253 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1117297903] [2019-12-07 15:34:13,254 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:13,254 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:13,254 INFO L82 PathProgramCache]: Analyzing trace with hash 820928471, now seen corresponding path program 1 times [2019-12-07 15:34:13,254 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:13,254 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1904528956] [2019-12-07 15:34:13,254 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:13,259 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:13,266 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:13,266 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1904528956] [2019-12-07 15:34:13,267 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:13,267 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 15:34:13,267 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1546623652] [2019-12-07 15:34:13,267 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:13,267 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:13,267 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 15:34:13,267 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 15:34:13,267 INFO L87 Difference]: Start difference. First operand 26326 states and 48334 transitions. cyclomatic complexity: 22009 Second operand 3 states. [2019-12-07 15:34:15,034 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:15,034 INFO L93 Difference]: Finished difference Result 46364 states and 84738 transitions. [2019-12-07 15:34:15,034 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 15:34:15,034 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 46364 states and 84738 transitions. [2019-12-07 15:34:15,155 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11944 [2019-12-07 15:34:15,249 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 46364 states to 46364 states and 84738 transitions. [2019-12-07 15:34:15,249 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 46364 [2019-12-07 15:34:15,272 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 46364 [2019-12-07 15:34:15,272 INFO L73 IsDeterministic]: Start isDeterministic. Operand 46364 states and 84738 transitions. [2019-12-07 15:34:15,293 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:15,293 INFO L688 BuchiCegarLoop]: Abstraction has 46364 states and 84738 transitions. [2019-12-07 15:34:15,314 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 46364 states and 84738 transitions. [2019-12-07 15:34:15,567 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 46364 to 46206. [2019-12-07 15:34:15,568 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46206 states. [2019-12-07 15:34:15,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46206 states to 46206 states and 84580 transitions. [2019-12-07 15:34:15,621 INFO L711 BuchiCegarLoop]: Abstraction has 46206 states and 84580 transitions. [2019-12-07 15:34:15,621 INFO L591 BuchiCegarLoop]: Abstraction has 46206 states and 84580 transitions. [2019-12-07 15:34:15,621 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-12-07 15:34:15,622 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46206 states and 84580 transitions. [2019-12-07 15:34:15,712 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11900 [2019-12-07 15:34:15,712 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:15,712 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:15,716 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:15,716 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:15,717 INFO L794 eck$LassoCheckResult]: Stem: 306896#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 306897#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 304831#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 304832#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 305370#L385 assume 0 != main_~tmp~8; 311481#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 308180#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 308026#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 306210#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 307922#L2485 assume 0 == initPersonOnFloor_~floor; 311139#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 303487#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 307472#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 309334#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 310712#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 310713#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 311964#L2832 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 311981#L2833 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 309027#L861 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 309028#L882 __utac_acc__Specification3_spec__1_#t~ret121 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret121;havoc __utac_acc__Specification3_spec__1_#t~ret121; 311091#L2837 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 303440#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 305927#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 305928#L2214 assume !(0 == isFloorCalling_~floorID); 308598#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 305821#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 307446#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 308120#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 307468#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 307469#L1675 assume !(0 != timeShift_~tmp___9~2); 308236#L1766 assume !(1 == ~doorState~0); 311532#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 311168#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 304921#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 304922#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 309674#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 308898#L1217-2 assume !(0 == ~currentFloorID~0); 308899#L1223-2 assume ~currentFloorID~0 > 0; 309637#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 308607#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 306462#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 309423#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303352#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 320353#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 320351#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 320348#L1463 assume !(1 == ~currentHeading~0); 320309#L1473 assume !(0 == ~currentFloorID~0); 320303#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303260#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 320300#L2963 assume !(-1 == ~expectedDirection~0); 320267#L2975 assume !(1 == ~expectedDirection~0); 320263#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 320261#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 320259#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 320256#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 320251#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 320252#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 320270#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 320226#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 320217#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 320216#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 320214#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 320199#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 320187#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 320176#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 320175#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 320174#L1675-1 assume !(0 != timeShift_~tmp___9~2); 318594#L1766-3 assume !(1 == ~doorState~0); 338592#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 325760#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 325754#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 325751#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 309754#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 309755#L1217-8 assume !(0 == ~currentFloorID~0); 312249#L1223-8 assume ~currentFloorID~0 > 0; 309774#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 308518#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 306157#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 310400#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303216#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 325779#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 325528#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 305263#L1463-3 assume !(1 == ~currentHeading~0); 303263#L1473-9 assume !(0 == ~currentFloorID~0); 303264#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303236#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 324617#L2963-1 assume !(-1 == ~expectedDirection~0); 324613#L2975-1 assume !(1 == ~expectedDirection~0); 324610#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 324609#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 324605#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 324603#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 324602#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 317697#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 324593#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 324582#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 324578#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 324577#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 324576#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 324574#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 324569#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 324552#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 324549#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 324547#L1675-2 assume !(0 != timeShift_~tmp___9~2); 317640#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 324546#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 324543#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 324539#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 324536#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 324534#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 312227#L1217-14 assume !(0 == ~currentFloorID~0); 312226#L1223-14 assume ~currentFloorID~0 > 0; 309759#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 308557#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 306525#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 310346#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303330#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 324213#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 324211#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 324209#L1463-6 assume !(1 == ~currentHeading~0); 324207#L1473-18 assume !(0 == ~currentFloorID~0); 324196#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303198#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 324194#L2963-2 assume !(-1 == ~expectedDirection~0); 324191#L2975-2 assume !(1 == ~expectedDirection~0); 324189#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 324188#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 324176#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 324174#L2485-1 assume 0 == initPersonOnFloor_~floor; 324153#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 324136#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 324124#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 324108#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 324107#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 323422#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 323320#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 323321#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 314584#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 309246#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 334454#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 303594#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 307789#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 338649#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 308849#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 308850#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 314198#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 314196#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 313657#L1675-3 assume !(0 != timeShift_~tmp___9~2); 313656#L1766-9 assume !(1 == ~doorState~0); 313655#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 312979#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 312975#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 312973#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 312971#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 312203#L1217-20 assume !(0 == ~currentFloorID~0); 312201#L1223-20 assume ~currentFloorID~0 > 0; 309701#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 309702#L1238-20 assume ~currentFloorID~0 > 0; 312172#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 312164#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 303308#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 325702#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 325700#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 325696#L1463-9 assume !(1 == ~currentHeading~0); 325693#L1473-27 assume !(0 == ~currentFloorID~0); 325651#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 303121#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 337595#L2963-3 assume !(-1 == ~expectedDirection~0); 337591#L2975-3 assume !(1 == ~expectedDirection~0); 337583#L2976-3 cleanup_~i~0 := 0; 337582#L188-2 [2019-12-07 15:34:15,717 INFO L796 eck$LassoCheckResult]: Loop: 337582#L188-2 assume !false; 337581#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 337580#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 337579#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 337578#L196 assume 1 != cleanup_~tmp___0~0; 337577#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 337574#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 337571#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 337570#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 337556#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 337555#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 337554#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 337553#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 337552#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 337551#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 313942#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 313943#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 337544#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 334511#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 334506#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 334503#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 334502#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 334501#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 334498#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 334500#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 338038#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 338037#L1675-4 assume !(0 != timeShift_~tmp___9~2); 331858#L1766-12 assume !(1 == ~doorState~0); 325614#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 325615#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 331662#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 331660#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 331661#L1048-26 assume 1 == stopRequestedInDirection__wrappee__weight_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~22;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~22;isTopFloor_~retValue_acc~22 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~22; 338581#L2788-38 stopRequestedInDirection__wrappee__weight_#t~ret28 := isTopFloor_#res;stopRequestedInDirection__wrappee__weight_~tmp~15 := stopRequestedInDirection__wrappee__weight_#t~ret28;havoc stopRequestedInDirection__wrappee__weight_#t~ret28; 338566#L1052-26 assume !(0 != stopRequestedInDirection__wrappee__weight_~tmp~15); 338562#L1058-26 assume !(~currentFloorID~0 < 0); 338557#L1073-26 assume ~currentFloorID~0 < 0; 311160#L1075-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 311056#L1076-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 311057#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 328227#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 328225#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 328221#L1463-12 assume !(1 == ~currentHeading~0); 328219#L1473-36 assume !(0 == ~currentFloorID~0); 303140#L1473-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 303094#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 337588#L2963-4 assume !(-1 == ~expectedDirection~0); 337586#L2975-4 assume !(1 == ~expectedDirection~0); 337584#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 337582#L188-2 [2019-12-07 15:34:15,718 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:15,718 INFO L82 PathProgramCache]: Analyzing trace with hash 1272670873, now seen corresponding path program 1 times [2019-12-07 15:34:15,718 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:15,718 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1421618884] [2019-12-07 15:34:15,718 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:15,735 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:15,778 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:15,778 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1421618884] [2019-12-07 15:34:15,778 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:15,778 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:15,779 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1904363954] [2019-12-07 15:34:15,779 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:15,779 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:15,779 INFO L82 PathProgramCache]: Analyzing trace with hash -1837052519, now seen corresponding path program 1 times [2019-12-07 15:34:15,779 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:15,780 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [275792151] [2019-12-07 15:34:15,780 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:15,787 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:15,814 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:15,815 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [275792151] [2019-12-07 15:34:15,815 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:15,815 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:34:15,815 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1675061093] [2019-12-07 15:34:15,815 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:15,815 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:15,815 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:34:15,816 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:34:15,816 INFO L87 Difference]: Start difference. First operand 46206 states and 84580 transitions. cyclomatic complexity: 38375 Second operand 7 states. [2019-12-07 15:34:17,496 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:17,496 INFO L93 Difference]: Finished difference Result 135486 states and 251159 transitions. [2019-12-07 15:34:17,496 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-12-07 15:34:17,497 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 135486 states and 251159 transitions. [2019-12-07 15:34:17,920 INFO L131 ngComponentsAnalysis]: Automaton has 6 accepting balls. 36371 [2019-12-07 15:34:18,259 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 135486 states to 135342 states and 250919 transitions. [2019-12-07 15:34:18,259 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 135342 [2019-12-07 15:34:18,347 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 135342 [2019-12-07 15:34:18,347 INFO L73 IsDeterministic]: Start isDeterministic. Operand 135342 states and 250919 transitions. [2019-12-07 15:34:18,412 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:18,412 INFO L688 BuchiCegarLoop]: Abstraction has 135342 states and 250919 transitions. [2019-12-07 15:34:18,490 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 135342 states and 250919 transitions. [2019-12-07 15:34:19,235 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 135342 to 59451. [2019-12-07 15:34:19,235 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 59451 states. [2019-12-07 15:34:19,315 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 59451 states to 59451 states and 108912 transitions. [2019-12-07 15:34:19,315 INFO L711 BuchiCegarLoop]: Abstraction has 59451 states and 108912 transitions. [2019-12-07 15:34:19,315 INFO L591 BuchiCegarLoop]: Abstraction has 59451 states and 108912 transitions. [2019-12-07 15:34:19,315 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-12-07 15:34:19,315 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 59451 states and 108912 transitions. [2019-12-07 15:34:19,440 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15365 [2019-12-07 15:34:19,440 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:19,440 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:19,443 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:19,443 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:19,444 INFO L794 eck$LassoCheckResult]: Stem: 488735#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 488736#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 486684#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 486685#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 487248#L385 assume 0 != main_~tmp~8; 493939#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 490169#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 490021#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 488083#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 489886#L2485 assume 0 == initPersonOnFloor_~floor; 493480#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 485253#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 489395#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 491394#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 493026#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 493027#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 494494#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 485895#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 485896#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 491070#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 485837#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 485838#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 487800#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 487801#L2214 assume !(0 == isFloorCalling_~floorID); 490630#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 487697#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 489371#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 490115#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 489391#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 489392#L1675 assume !(0 != timeShift_~tmp___9~2); 490235#L1766 assume !(1 == ~doorState~0); 493992#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 493515#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 486775#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 486776#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 491722#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 490970#L1217-2 assume !(0 == ~currentFloorID~0); 490971#L1223-2 assume ~currentFloorID~0 > 0; 491678#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 490644#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 488330#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 491469#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 485081#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 494799#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 494795#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487155#L1463 assume !(1 == ~currentHeading~0); 485302#L1473 assume !(0 == ~currentFloorID~0); 485303#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484581#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484582#L2963 assume !(-1 == ~expectedDirection~0); 491129#L2975 assume !(1 == ~expectedDirection~0); 491130#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 510960#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 510957#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 510955#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 495117#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 491034#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 491035#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 485846#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 485847#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 522305#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 522306#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 522313#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 522296#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 522289#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 522288#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 522271#L1675-1 assume !(0 != timeShift_~tmp___9~2); 490241#L1766-3 assume !(1 == ~doorState~0); 501650#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 501651#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 501463#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 501464#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 511018#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 494973#L1217-8 assume !(0 == ~currentFloorID~0); 494971#L1223-8 assume ~currentFloorID~0 > 0; 491837#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 491838#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 492662#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 492663#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 496609#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 496606#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 496604#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487125#L1463-3 assume !(1 == ~currentHeading~0); 484989#L1473-9 assume !(0 == ~currentFloorID~0); 484990#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484564#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484565#L2963-1 assume !(-1 == ~expectedDirection~0); 491090#L2975-1 assume !(1 == ~expectedDirection~0); 491092#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 520846#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 520845#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 520844#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501432#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 520325#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 520480#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 520478#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 520479#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 532581#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 532580#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 532575#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 532573#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 532565#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 532564#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 532562#L1675-2 assume !(0 != timeShift_~tmp___9~2); 520430#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 532549#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 532547#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 532543#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 532541#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 532542#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 494967#L1217-14 assume !(0 == ~currentFloorID~0); 494966#L1223-14 assume ~currentFloorID~0 > 0; 491824#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 490589#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 488390#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 492589#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 512437#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 512434#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 512432#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487136#L1463-6 assume !(1 == ~currentHeading~0); 484982#L1473-18 assume !(0 == ~currentFloorID~0); 484947#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484550#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484551#L2963-2 assume !(-1 == ~expectedDirection~0); 491097#L2975-2 assume !(1 == ~expectedDirection~0); 490937#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 490024#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 488090#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 489873#L2485-1 assume 0 == initPersonOnFloor_~floor; 493396#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 485236#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 489374#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 491356#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 519124#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 519123#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 519122#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501354#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 516380#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 519116#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 519112#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 519111#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 519109#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 519104#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 519102#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 519098#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 519094#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 519092#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 519091#L1675-3 assume !(0 != timeShift_~tmp___9~2); 516331#L1766-9 assume !(1 == ~doorState~0); 537794#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 501894#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 501892#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 501690#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 501691#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 495058#L1217-20 assume !(0 == ~currentFloorID~0); 494940#L1223-20 assume ~currentFloorID~0 > 0; 491758#L1224-20 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 491759#L1238-20 assume ~currentFloorID~0 > 0; 494762#L1240-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 494764#L1241-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 510740#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 510738#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 510736#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487110#L1463-9 assume !(1 == ~currentHeading~0); 484935#L1473-27 assume !(0 == ~currentFloorID~0); 484895#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484533#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484534#L2963-3 assume !(-1 == ~expectedDirection~0); 491109#L2975-3 assume !(1 == ~expectedDirection~0); 490944#L2976-3 cleanup_~i~0 := 0; 490945#L188-2 [2019-12-07 15:34:19,444 INFO L796 eck$LassoCheckResult]: Loop: 490945#L188-2 assume !false; 494576#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 494567#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 491958#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 491959#L196 assume 1 != cleanup_~tmp___0~0; 493407#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 488682#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 487758#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 484688#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 484689#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 492340#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 492826#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 515266#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 515263#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 515260#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 507460#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 515197#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 515192#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 515188#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 515187#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 515185#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 515184#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 515183#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 515181#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 515173#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 515164#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 511561#L1675-4 assume !(0 != timeShift_~tmp___9~2); 511560#L1766-12 assume !(1 == ~doorState~0); 511516#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 511501#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 511497#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 501315#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 501317#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 495064#L1217-26 assume !(0 == ~currentFloorID~0); 494934#L1223-26 assume ~currentFloorID~0 > 0; 491727#L1224-26 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 491729#L1238-26 assume ~currentFloorID~0 > 0; 494858#L1240-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 494722#L1241-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 484692#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 540406#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 540404#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 487116#L1463-12 assume !(1 == ~currentHeading~0); 484857#L1473-36 assume !(0 == ~currentFloorID~0); 484858#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 484516#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 484517#L2963-4 assume !(-1 == ~expectedDirection~0); 491104#L2975-4 assume !(1 == ~expectedDirection~0); 490952#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 490945#L188-2 [2019-12-07 15:34:19,444 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:19,444 INFO L82 PathProgramCache]: Analyzing trace with hash -2789324, now seen corresponding path program 1 times [2019-12-07 15:34:19,444 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:19,445 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [582496840] [2019-12-07 15:34:19,445 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:19,461 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:19,503 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:19,503 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [582496840] [2019-12-07 15:34:19,504 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:19,504 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:19,504 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [494757436] [2019-12-07 15:34:19,504 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:19,504 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:19,504 INFO L82 PathProgramCache]: Analyzing trace with hash -1150099062, now seen corresponding path program 1 times [2019-12-07 15:34:19,504 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:19,505 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [394826093] [2019-12-07 15:34:19,505 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:19,510 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:19,524 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:19,524 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [394826093] [2019-12-07 15:34:19,524 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:19,524 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:34:19,525 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1341521595] [2019-12-07 15:34:19,525 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:19,525 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:19,525 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:34:19,525 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:34:19,525 INFO L87 Difference]: Start difference. First operand 59451 states and 108912 transitions. cyclomatic complexity: 49463 Second operand 5 states. [2019-12-07 15:34:22,033 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:22,033 INFO L93 Difference]: Finished difference Result 193396 states and 355913 transitions. [2019-12-07 15:34:22,033 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 15:34:22,034 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 193396 states and 355913 transitions. [2019-12-07 15:34:22,615 INFO L131 ngComponentsAnalysis]: Automaton has 4 accepting balls. 53085 [2019-12-07 15:34:24,998 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 193396 states to 193396 states and 355913 transitions. [2019-12-07 15:34:24,998 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 193396 [2019-12-07 15:34:25,074 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 193396 [2019-12-07 15:34:25,075 INFO L73 IsDeterministic]: Start isDeterministic. Operand 193396 states and 355913 transitions. [2019-12-07 15:34:25,138 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:25,138 INFO L688 BuchiCegarLoop]: Abstraction has 193396 states and 355913 transitions. [2019-12-07 15:34:25,217 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 193396 states and 355913 transitions. [2019-12-07 15:34:25,851 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 193396 to 60591. [2019-12-07 15:34:25,851 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 60591 states. [2019-12-07 15:34:25,932 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 60591 states to 60591 states and 110121 transitions. [2019-12-07 15:34:25,933 INFO L711 BuchiCegarLoop]: Abstraction has 60591 states and 110121 transitions. [2019-12-07 15:34:25,933 INFO L591 BuchiCegarLoop]: Abstraction has 60591 states and 110121 transitions. [2019-12-07 15:34:25,933 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-12-07 15:34:25,933 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 60591 states and 110121 transitions. [2019-12-07 15:34:26,060 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 15640 [2019-12-07 15:34:26,060 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:26,060 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:26,063 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:26,063 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:26,063 INFO L794 eck$LassoCheckResult]: Stem: 741535#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 741536#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 739485#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 739486#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 740058#L385 assume 0 != main_~tmp~8; 746633#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 742914#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 742766#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 740890#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 742637#L2485 assume 0 == initPersonOnFloor_~floor; 746193#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 738129#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 742163#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 744148#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 745754#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 745755#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 747206#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 738750#L2894 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 738751#L861-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 743826#L882-5 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 738694#L2898 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 738695#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 740607#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 740608#L2214 assume !(0 == isFloorCalling_~floorID); 743370#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 740501#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 742139#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 742860#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 742159#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 742160#L1675 assume !(0 != timeShift_~tmp___9~2); 742967#L1766 assume !(1 == ~doorState~0); 746684#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 746226#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 739575#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 739576#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744477#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 743725#L1217-2 assume !(0 == ~currentFloorID~0); 743726#L1223-2 assume ~currentFloorID~0 > 0; 744432#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 743389#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 741137#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 744223#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 737963#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 747913#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 747912#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 739958#L1463 assume !(1 == ~currentHeading~0); 738178#L1473 assume !(0 == ~currentFloorID~0); 738179#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 738186#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 766373#L2963 assume !(-1 == ~expectedDirection~0); 766367#L2975 assume !(1 == ~expectedDirection~0); 766364#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 766362#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 766360#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 766358#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 748022#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 743790#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 743791#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 746870#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 742493#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 742494#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 775330#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 775329#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 775326#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 775327#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 787554#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 787552#L1675-1 assume !(0 != timeShift_~tmp___9~2); 742971#L1766-3 assume !(1 == ~doorState~0); 746683#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 764433#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 764415#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 764416#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744558#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 744559#L1217-8 assume !(0 == ~currentFloorID~0); 747751#L1223-8 assume ~currentFloorID~0 > 0; 747752#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 743284#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 740838#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 747167#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 737948#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 766445#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 766446#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 739929#L1463-3 assume !(1 == ~currentHeading~0); 737872#L1473-9 assume !(0 == ~currentFloorID~0); 737873#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 778854#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 778852#L2963-1 assume !(-1 == ~expectedDirection~0); 778849#L2975-1 assume !(1 == ~expectedDirection~0); 778845#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 778746#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 778735#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 778734#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 750772#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 783456#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 783452#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 783448#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 783447#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 783445#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 783446#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 783857#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 783855#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 783434#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 783433#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 783427#L1675-2 assume !(0 != timeShift_~tmp___9~2); 742947#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 746696#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 746245#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 739585#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 739586#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 761762#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 747905#L1217-14 assume !(0 == ~currentFloorID~0); 747745#L1223-14 assume ~currentFloorID~0 > 0; 744563#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 744564#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 767357#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 747146#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 737933#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 770297#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 770294#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 767088#L1463-6 assume !(1 == ~currentHeading~0); 767089#L1473-18 assume !(0 == ~currentFloorID~0); 737826#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737804#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 783802#L2963-2 assume !(-1 == ~expectedDirection~0); 783799#L2975-2 assume !(1 == ~expectedDirection~0); 783797#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 783796#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 783790#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 783789#L2485-1 assume 0 == initPersonOnFloor_~floor; 778829#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 778744#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 778745#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 779138#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 779136#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 779134#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 779132#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 750761#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 779129#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 779125#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 779122#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 778933#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 778881#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 778880#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 778879#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 778876#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 778877#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 796897#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 796896#L1675-3 assume !(0 != timeShift_~tmp___9~2); 742950#L1766-9 assume !(1 == ~doorState~0); 746843#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 765194#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 765192#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 744455#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744456#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 747715#L1217-20 assume !(0 == ~currentFloorID~0); 747713#L1223-20 assume ~currentFloorID~0 > 0; 744509#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 744510#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 745003#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 745004#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 770355#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 770352#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 770350#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 765180#L1463-9 assume !(1 == ~currentHeading~0); 762785#L1473-27 assume !(0 == ~currentFloorID~0); 737768#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737724#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 796548#L2963-3 assume !(-1 == ~expectedDirection~0); 796544#L2975-3 assume !(1 == ~expectedDirection~0); 796536#L2976-3 cleanup_~i~0 := 0; 796535#L188-2 [2019-12-07 15:34:26,064 INFO L796 eck$LassoCheckResult]: Loop: 796535#L188-2 assume !false; 796534#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 796533#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 796532#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 796531#L196 assume 1 != cleanup_~tmp___0~0; 796530#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 796418#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 796415#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 789294#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 789281#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 789269#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 789270#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 789249#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 789250#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 788166#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 757040#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 796216#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 796212#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 796209#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 796208#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 796206#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 796205#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 796204#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 796201#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 796203#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 797644#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 797638#L1675-4 assume !(0 != timeShift_~tmp___9~2); 742953#L1766-12 assume !(1 == ~doorState~0); 746848#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 787723#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 787720#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 744465#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 744467#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 747833#L1217-26 assume !(0 == ~currentFloorID~0); 747701#L1223-26 assume ~currentFloorID~0 > 0; 744483#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 741388#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 741134#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 744806#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 770336#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 770332#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 770331#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 766450#L1463-12 assume !(1 == ~currentHeading~0); 766451#L1473-36 assume !(0 == ~currentFloorID~0); 737744#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 737696#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 796541#L2963-4 assume !(-1 == ~expectedDirection~0); 796539#L2975-4 assume !(1 == ~expectedDirection~0); 796537#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 796535#L188-2 [2019-12-07 15:34:26,065 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:26,065 INFO L82 PathProgramCache]: Analyzing trace with hash -1106561423, now seen corresponding path program 1 times [2019-12-07 15:34:26,065 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:26,065 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2024281489] [2019-12-07 15:34:26,065 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:26,078 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:26,109 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:26,109 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2024281489] [2019-12-07 15:34:26,110 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:26,110 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:26,110 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1669710386] [2019-12-07 15:34:26,110 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:26,110 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:26,110 INFO L82 PathProgramCache]: Analyzing trace with hash 2041096135, now seen corresponding path program 1 times [2019-12-07 15:34:26,110 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:26,111 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [346768108] [2019-12-07 15:34:26,111 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:26,116 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:26,126 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:26,126 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [346768108] [2019-12-07 15:34:26,126 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:26,126 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 15:34:26,126 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [352194622] [2019-12-07 15:34:26,127 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:26,127 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:26,127 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 15:34:26,127 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 15:34:26,127 INFO L87 Difference]: Start difference. First operand 60591 states and 110121 transitions. cyclomatic complexity: 49532 Second operand 3 states. [2019-12-07 15:34:26,446 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:26,446 INFO L93 Difference]: Finished difference Result 83360 states and 151885 transitions. [2019-12-07 15:34:26,446 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 15:34:26,446 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 83360 states and 151885 transitions. [2019-12-07 15:34:26,695 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 21494 [2019-12-07 15:34:26,889 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 83360 states to 83360 states and 151885 transitions. [2019-12-07 15:34:26,889 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 83360 [2019-12-07 15:34:26,940 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 83360 [2019-12-07 15:34:26,940 INFO L73 IsDeterministic]: Start isDeterministic. Operand 83360 states and 151885 transitions. [2019-12-07 15:34:26,980 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:26,980 INFO L688 BuchiCegarLoop]: Abstraction has 83360 states and 151885 transitions. [2019-12-07 15:34:27,026 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 83360 states and 151885 transitions. [2019-12-07 15:34:27,492 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 83360 to 81726. [2019-12-07 15:34:27,492 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 81726 states. [2019-12-07 15:34:27,593 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 81726 states to 81726 states and 149019 transitions. [2019-12-07 15:34:27,593 INFO L711 BuchiCegarLoop]: Abstraction has 81726 states and 149019 transitions. [2019-12-07 15:34:27,593 INFO L591 BuchiCegarLoop]: Abstraction has 81726 states and 149019 transitions. [2019-12-07 15:34:27,593 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-12-07 15:34:27,593 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 81726 states and 149019 transitions. [2019-12-07 15:34:27,759 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 20694 [2019-12-07 15:34:27,759 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:27,759 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:27,763 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:27,763 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:27,763 INFO L794 eck$LassoCheckResult]: Stem: 885440#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 885441#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 883386#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 883387#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 883969#L385 assume 0 != main_~tmp~8; 890242#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 886747#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 886599#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 884803#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 886489#L2485 assume 0 == initPersonOnFloor_~floor; 889845#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 882065#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 886018#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 887902#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 889411#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 889412#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 890786#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 882683#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 882629#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 886890#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 885801#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 885172#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 886257#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 884516#L1525 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 884517#L2214 assume !(0 == isFloorCalling_~floorID); 891858#L2218 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 891852#L2241 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 886937#L1496 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 886693#L1508 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 886014#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 886015#L1675 assume !(0 != timeShift_~tmp___9~2); 886796#L1766 assume !(1 == ~doorState~0); 890290#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 889877#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 883476#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 883477#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 888234#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 887477#L1217-2 assume !(0 == ~currentFloorID~0); 887478#L1223-2 assume ~currentFloorID~0 > 0; 888192#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 891816#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 891811#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 891809#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 881906#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 892846#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 892783#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 892785#L1463 assume !(1 == ~currentHeading~0); 882114#L1473 assume !(0 == ~currentFloorID~0); 882115#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 903111#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 903112#L2963 assume !(-1 == ~expectedDirection~0); 903039#L2975 assume !(1 == ~expectedDirection~0); 887520#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 887521#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 889413#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 890777#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 890880#L2894-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902063#L2904-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902062#L2915-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902061#L2926-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902060#L2937-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902058#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902059#L1525-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 905924#L2214-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 905923#L2241-61 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 905915#L1496-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 905913#L1508-1 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 905911#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 905909#L1675-1 assume !(0 != timeShift_~tmp___9~2); 905908#L1766-3 assume !(1 == ~doorState~0); 905903#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 905878#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 905872#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 905867#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 905868#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 905992#L1217-8 assume !(0 == ~currentFloorID~0); 893926#L1223-8 assume ~currentFloorID~0 > 0; 888329#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 888330#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 893872#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 893845#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 893522#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 893515#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 893511#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 893512#L1463-3 assume !(1 == ~currentHeading~0); 892781#L1473-9 assume !(0 == ~currentFloorID~0); 883735#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 938786#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 938782#L2963-1 assume !(-1 == ~expectedDirection~0); 938783#L2975-1 assume !(1 == ~expectedDirection~0); 935056#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 935054#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 935052#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 935051#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 895303#L2894-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902925#L2904-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902923#L2915-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902922#L2926-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902920#L2937-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902918#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902919#L1525-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 902913#L2214-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902910#L2241-122 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 902904#L1496-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 902905#L1508-2 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 929045#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 929043#L1675-2 assume !(0 != timeShift_~tmp___9~2); 929042#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 929041#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 929039#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 929035#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 929033#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 929032#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 929031#L1217-14 assume !(0 == ~currentFloorID~0); 893921#L1223-14 assume ~currentFloorID~0 > 0; 888319#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 887122#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 885110#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 888964#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 912352#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 906559#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 895196#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 883847#L1463-6 assume !(1 == ~currentHeading~0); 883848#L1473-18 assume !(0 == ~currentFloorID~0); 883601#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 927336#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 935862#L2963-2 assume !(-1 == ~expectedDirection~0); 935860#L2975-2 assume !(1 == ~expectedDirection~0); 935856#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 935855#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 935849#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 935848#L2485-1 assume 0 == initPersonOnFloor_~floor; 935830#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 935813#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 935810#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 906226#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 906227#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 906207#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 906208#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 902947#L2894-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902946#L2904-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902945#L2915-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902944#L2926-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902943#L2937-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902942#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902939#L1525-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 902940#L2214-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902931#L2241-183 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 902932#L1496-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 906345#L1508-3 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 906340#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 906334#L1675-3 assume !(0 != timeShift_~tmp___9~2); 906328#L1766-9 assume !(1 == ~doorState~0); 906325#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 906316#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 906310#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 906305#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 906306#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 906405#L1217-20 assume !(0 == ~currentFloorID~0); 893803#L1223-20 assume ~currentFloorID~0 > 0; 893802#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 893779#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 893773#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 893774#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 893518#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 893517#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 893509#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 883822#L1463-9 assume !(1 == ~currentHeading~0); 881764#L1473-27 assume !(0 == ~currentFloorID~0); 881765#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 907166#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 950236#L2963-3 assume !(-1 == ~expectedDirection~0); 950238#L2975-3 assume !(1 == ~expectedDirection~0); 937676#L2976-3 cleanup_~i~0 := 0; 937672#L188-2 [2019-12-07 15:34:27,764 INFO L796 eck$LassoCheckResult]: Loop: 937672#L188-2 assume !false; 937667#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 937666#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 937665#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 937654#L196 assume 1 != cleanup_~tmp___0~0; 936641#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 936296#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 935807#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 932187#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 932173#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 932059#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 932008#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 932006#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 932004#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 932002#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 928555#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 902898#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 902899#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 902894#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 902892#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 902893#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 902887#L1525-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0);havoc stopRequestedAtCurrentFloor__wrappee__weight_#res;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44, stopRequestedAtCurrentFloor__wrappee__weight_#t~ret45, stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16, stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18, stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;havoc stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp~18;havoc stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 902888#L2214-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 902956#L2241-249 stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6 := stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44;havoc stopRequestedAtCurrentFloor__wrappee__weight_#t~ret44; 902950#L1496-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__weight_~tmp___0~6;stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16 := 1;stopRequestedAtCurrentFloor__wrappee__weight_#res := stopRequestedAtCurrentFloor__wrappee__weight_~retValue_acc~16; 902951#L1508-4 stopRequestedAtCurrentFloor_#t~ret48 := stopRequestedAtCurrentFloor__wrappee__weight_#res;stopRequestedAtCurrentFloor_~retValue_acc~17 := stopRequestedAtCurrentFloor_#t~ret48;havoc stopRequestedAtCurrentFloor_#t~ret48;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 931398#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 931396#L1675-4 assume !(0 != timeShift_~tmp___9~2); 931395#L1766-12 assume !(1 == ~doorState~0); 931394#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 931391#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 931388#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 931386#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 931387#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 931380#L1217-26 assume !(0 == ~currentFloorID~0); 893169#L1223-26 assume ~currentFloorID~0 > 0; 893168#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 893137#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 893132#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 893133#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 892958#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 892956#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 892771#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 892773#L1463-12 assume !(1 == ~currentHeading~0); 892767#L1473-36 assume !(0 == ~currentFloorID~0); 883549#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 907962#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 937683#L2963-4 assume !(-1 == ~expectedDirection~0); 937684#L2975-4 assume !(1 == ~expectedDirection~0); 937677#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 937672#L188-2 [2019-12-07 15:34:27,764 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:27,764 INFO L82 PathProgramCache]: Analyzing trace with hash 1573303405, now seen corresponding path program 1 times [2019-12-07 15:34:27,764 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:27,764 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2038730517] [2019-12-07 15:34:27,764 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:27,776 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:27,809 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:27,810 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2038730517] [2019-12-07 15:34:27,810 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:27,810 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:27,810 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1760317615] [2019-12-07 15:34:27,810 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:27,810 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:27,810 INFO L82 PathProgramCache]: Analyzing trace with hash 1076256460, now seen corresponding path program 1 times [2019-12-07 15:34:27,811 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:27,811 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1798270057] [2019-12-07 15:34:27,811 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:27,816 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:27,845 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:27,845 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1798270057] [2019-12-07 15:34:27,845 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:27,845 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:34:27,845 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [448730477] [2019-12-07 15:34:27,846 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:27,846 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:27,846 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:34:27,846 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:34:27,846 INFO L87 Difference]: Start difference. First operand 81726 states and 149019 transitions. cyclomatic complexity: 67295 Second operand 7 states. [2019-12-07 15:34:28,800 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:28,800 INFO L93 Difference]: Finished difference Result 188092 states and 346575 transitions. [2019-12-07 15:34:28,800 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 18 states. [2019-12-07 15:34:28,801 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 188092 states and 346575 transitions. [2019-12-07 15:34:29,356 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 50663 [2019-12-07 15:34:29,795 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 188092 states to 188092 states and 346575 transitions. [2019-12-07 15:34:29,795 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 188092 [2019-12-07 15:34:29,910 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 188092 [2019-12-07 15:34:29,911 INFO L73 IsDeterministic]: Start isDeterministic. Operand 188092 states and 346575 transitions. [2019-12-07 15:34:29,995 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:29,995 INFO L688 BuchiCegarLoop]: Abstraction has 188092 states and 346575 transitions. [2019-12-07 15:34:30,092 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 188092 states and 346575 transitions. [2019-12-07 15:34:30,795 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 188092 to 80649. [2019-12-07 15:34:30,795 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 80649 states. [2019-12-07 15:34:30,897 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 80649 states to 80649 states and 147261 transitions. [2019-12-07 15:34:30,897 INFO L711 BuchiCegarLoop]: Abstraction has 80649 states and 147261 transitions. [2019-12-07 15:34:30,897 INFO L591 BuchiCegarLoop]: Abstraction has 80649 states and 147261 transitions. [2019-12-07 15:34:30,897 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-12-07 15:34:30,898 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 80649 states and 147261 transitions. [2019-12-07 15:34:31,062 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 20318 [2019-12-07 15:34:31,062 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:31,062 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:31,065 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:31,065 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:31,066 INFO L794 eck$LassoCheckResult]: Stem: 1155321#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1155322#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1153256#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1153257#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1153839#L385 assume 0 != main_~tmp~8; 1160122#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1156626#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1156472#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1154683#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1156353#L2485 assume 0 == initPersonOnFloor_~floor; 1159747#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1151924#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1155899#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1157803#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1159322#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1159323#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1160647#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1152550#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1152498#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1156764#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1155687#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1155051#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1156142#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1161545#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1161543#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1161542#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1161541#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1161535#L869-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1161531#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1161530#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1161481#L1675 assume !(0 != timeShift_~tmp___9~2); 1161480#L1766 assume !(1 == ~doorState~0); 1161479#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1161477#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1161473#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1161471#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1161470#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1161469#L1217-2 assume !(0 == ~currentFloorID~0); 1161467#L1223-2 assume ~currentFloorID~0 > 0; 1161468#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1161465#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1161461#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1161459#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1161460#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1161396#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1161397#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1161956#L1463 assume !(1 == ~currentHeading~0); 1151970#L1473 assume !(0 == ~currentFloorID~0); 1151971#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1160963#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1169357#L2963 assume !(-1 == ~expectedDirection~0); 1169354#L2975 assume !(1 == ~expectedDirection~0); 1169351#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1169350#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1169349#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1169341#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1160947#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1169338#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1170419#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1170417#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1170418#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1175339#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1175338#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1175337#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1175335#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1175330#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1175323#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1175324#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1160173#L1766-3 assume !(1 == ~doorState~0); 1160174#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1159788#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1153349#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1153350#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1158146#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1170289#L1217-8 assume !(0 == ~currentFloorID~0); 1170287#L1223-8 assume ~currentFloorID~0 > 0; 1170286#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1170285#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1158932#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1158933#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1170101#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1170097#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1170091#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1153705#L1463-3 assume !(1 == ~currentHeading~0); 1151690#L1473-9 assume !(0 == ~currentFloorID~0); 1151691#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1151692#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1173854#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1172149#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1172145#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1172146#L2975-1 assume !(1 == ~expectedDirection~0); 1172094#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1172095#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1172069#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1172070#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1167972#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1171886#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1171878#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1171866#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1171864#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1171851#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1171852#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1171835#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1171832#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1171829#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1171821#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1171822#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1171403#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1171398#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1171348#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1171339#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1171336#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1171337#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1171357#L1217-14 assume !(0 == ~currentFloorID~0); 1171299#L1223-14 assume ~currentFloorID~0 > 0; 1171300#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1171374#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1171364#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1171354#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1171355#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1179326#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1179325#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1153715#L1463-6 assume !(1 == ~currentHeading~0); 1153716#L1473-18 assume !(0 == ~currentFloorID~0); 1204648#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1204644#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1204641#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1200822#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1200820#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1200812#L2975-2 assume !(1 == ~expectedDirection~0); 1200810#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1200809#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1200802#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1200801#L2485-1 assume 0 == initPersonOnFloor_~floor; 1200784#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1200767#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1200764#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1200760#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1200759#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1200758#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1200730#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1164426#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1194151#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1200890#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1200888#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1200635#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1200623#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1200624#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1200609#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1200463#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1200456#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1200455#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1179576#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1179575#L1766-9 assume !(1 == ~doorState~0); 1179574#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1179571#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1179568#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1179557#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1179407#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1162531#L1217-20 assume !(0 == ~currentFloorID~0); 1162529#L1223-20 assume ~currentFloorID~0 > 0; 1162528#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1162525#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1162510#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1162442#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1162407#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1162405#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1162401#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1153687#L1463-9 assume !(1 == ~currentHeading~0); 1151633#L1473-27 assume !(0 == ~currentFloorID~0); 1151587#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1151546#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1198546#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1191537#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1198545#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1191450#L2975-3 assume !(1 == ~expectedDirection~0); 1191432#L2976-3 cleanup_~i~0 := 0; 1191419#L188-2 [2019-12-07 15:34:31,066 INFO L796 eck$LassoCheckResult]: Loop: 1191419#L188-2 assume !false; 1191415#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1191409#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 1191277#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1191273#L196 assume 1 != cleanup_~tmp___0~0; 1191253#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1191249#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1191230#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 1191225#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 1191211#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 1191210#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1191209#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1191208#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1191207#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1191206#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1181799#L2894-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1188551#L2904-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1188552#L2915-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1188563#L2926-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1188556#L2937-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1188557#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1191271#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1191272#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1191279#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1191278#L865-58 assume !(1 == buttonForFloorIsPressed_~floorID); 1191274#L869-58 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1191254#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1191252#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1179451#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1179453#L1766-12 assume !(1 == ~doorState~0); 1179447#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1179448#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1190840#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1190834#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1190835#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1190823#L1217-26 assume !(0 == ~currentFloorID~0); 1178953#L1223-26 assume ~currentFloorID~0 > 0; 1178952#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1178949#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1178945#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1178946#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1178652#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1178649#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1178068#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1178070#L1463-12 assume !(1 == ~currentHeading~0); 1191547#L1473-36 assume !(0 == ~currentFloorID~0); 1153417#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1185346#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1191466#L2963-4 assume !(-1 == ~expectedDirection~0); 1191464#L2975-4 assume !(1 == ~expectedDirection~0); 1191433#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1191419#L188-2 [2019-12-07 15:34:31,066 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:31,066 INFO L82 PathProgramCache]: Analyzing trace with hash -2076185870, now seen corresponding path program 1 times [2019-12-07 15:34:31,067 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:31,067 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1339819063] [2019-12-07 15:34:31,067 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:31,080 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:31,116 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:31,116 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1339819063] [2019-12-07 15:34:31,116 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:31,116 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:31,117 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [978386999] [2019-12-07 15:34:31,117 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:31,117 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:31,117 INFO L82 PathProgramCache]: Analyzing trace with hash 1698784332, now seen corresponding path program 1 times [2019-12-07 15:34:31,117 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:31,117 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1030155206] [2019-12-07 15:34:31,117 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:31,121 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:31,163 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:31,164 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1030155206] [2019-12-07 15:34:31,164 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:31,164 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 15:34:31,164 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1373546616] [2019-12-07 15:34:31,164 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:31,164 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:31,164 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 15:34:31,164 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2019-12-07 15:34:31,165 INFO L87 Difference]: Start difference. First operand 80649 states and 147261 transitions. cyclomatic complexity: 66615 Second operand 8 states. [2019-12-07 15:34:40,624 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:40,624 INFO L93 Difference]: Finished difference Result 201600 states and 368958 transitions. [2019-12-07 15:34:40,625 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-12-07 15:34:40,625 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 201600 states and 368958 transitions. [2019-12-07 15:34:41,298 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 52947 [2019-12-07 15:34:41,825 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 201600 states to 201600 states and 368958 transitions. [2019-12-07 15:34:41,825 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 201600 [2019-12-07 15:34:41,952 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 201600 [2019-12-07 15:34:41,952 INFO L73 IsDeterministic]: Start isDeterministic. Operand 201600 states and 368958 transitions. [2019-12-07 15:34:42,044 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:42,044 INFO L688 BuchiCegarLoop]: Abstraction has 201600 states and 368958 transitions. [2019-12-07 15:34:42,149 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 201600 states and 368958 transitions. [2019-12-07 15:34:43,303 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 201600 to 103118. [2019-12-07 15:34:43,303 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103118 states. [2019-12-07 15:34:43,449 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103118 states to 103118 states and 189304 transitions. [2019-12-07 15:34:43,449 INFO L711 BuchiCegarLoop]: Abstraction has 103118 states and 189304 transitions. [2019-12-07 15:34:43,449 INFO L591 BuchiCegarLoop]: Abstraction has 103118 states and 189304 transitions. [2019-12-07 15:34:43,449 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-12-07 15:34:43,450 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 103118 states and 189304 transitions. [2019-12-07 15:34:43,674 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 26486 [2019-12-07 15:34:43,674 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:43,674 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:43,678 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:43,678 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:43,678 INFO L794 eck$LassoCheckResult]: Stem: 1437529#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1437530#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1435481#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1435482#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1436053#L385 assume 0 != main_~tmp~8; 1442100#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1438785#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1438632#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1436896#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1438511#L2485 assume 0 == initPersonOnFloor_~floor; 1441783#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1434178#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1438081#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1439893#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1441363#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1441364#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1442673#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1434781#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1434733#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1438927#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1437878#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1437265#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1438310#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1443633#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1443385#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1443383#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1443381#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1443380#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1443379#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1443371#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1443369#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1443368#L1675 assume !(0 != timeShift_~tmp___9~2); 1443367#L1766 assume !(1 == ~doorState~0); 1443366#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1443364#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1443360#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1443354#L1401 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1443352#L1048-2 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1443350#L1217-2 assume !(0 == ~currentFloorID~0); 1443348#L1223-2 assume ~currentFloorID~0 > 0; 1440318#L1224-2 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1440319#L2214-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1443269#L2241-26 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1443266#L1228-2 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1443267#L1370-2 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1443640#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1443641#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1443824#L1463 assume !(1 == ~currentHeading~0); 1434224#L1473 assume !(0 == ~currentFloorID~0); 1434225#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1445487#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1482561#L2963 assume !(-1 == ~expectedDirection~0); 1482559#L2975 assume !(1 == ~expectedDirection~0); 1482556#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1482555#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1482554#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1482553#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1442932#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1482552#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1485211#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1485209#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1485210#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1490400#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1490399#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1490398#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1490396#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1490391#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1490287#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1490288#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1499077#L1766-3 assume !(1 == ~doorState~0); 1499076#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1499075#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1499070#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1499068#L1401-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1499067#L1048-8 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1499066#L1217-8 assume !(0 == ~currentFloorID~0); 1499065#L1223-8 assume ~currentFloorID~0 > 0; 1499062#L1224-8 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1499051#L2214-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1499031#L2241-87 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1499019#L1228-8 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1499006#L1370-8 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1499002#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1498997#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1496234#L1463-3 assume !(1 == ~currentHeading~0); 1433969#L1473-9 assume !(0 == ~currentFloorID~0); 1433970#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433941#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1528217#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1467233#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1523146#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1467211#L2975-1 assume !(1 == ~expectedDirection~0); 1467210#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1466076#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1466077#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1481802#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1457867#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1487838#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1487835#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1487832#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1487834#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1490300#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1490299#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1490298#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1490297#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1490291#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1490292#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1528416#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1528414#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1528413#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1528411#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1528406#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1528403#L1401-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1528404#L1048-14 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1535447#L1217-14 assume !(0 == ~currentFloorID~0); 1535444#L1223-14 assume ~currentFloorID~0 > 0; 1535435#L1224-14 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1535171#L2214-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1535167#L2241-148 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1528308#L1228-14 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1528305#L1370-14 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1528300#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1528299#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1435950#L1463-6 assume !(1 == ~currentHeading~0); 1433961#L1473-18 assume !(0 == ~currentFloorID~0); 1433924#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433925#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1496240#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1492402#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1496238#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1492398#L2975-2 assume !(1 == ~expectedDirection~0); 1492396#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1492395#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1492389#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1492388#L2485-1 assume 0 == initPersonOnFloor_~floor; 1492370#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1490564#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1490505#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1473460#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1473415#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1473381#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1473351#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1451246#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1473330#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1473327#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1473324#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1473325#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1490285#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1490284#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1490283#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1490282#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1490278#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1487785#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1487786#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1535385#L1766-9 assume !(1 == ~doorState~0); 1535384#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1535380#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1535347#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1535341#L1401-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1535342#L1048-20 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1535371#L1217-20 assume !(0 == ~currentFloorID~0); 1535364#L1223-20 assume ~currentFloorID~0 > 0; 1535362#L1224-20 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1535312#L2214-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1535308#L2241-209 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1535267#L1228-20 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1535196#L1370-20 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1535194#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1535193#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1435924#L1463-9 assume !(1 == ~currentHeading~0); 1433912#L1473-27 assume !(0 == ~currentFloorID~0); 1433872#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433832#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1515403#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1495269#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1515384#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1494295#L2975-3 assume !(1 == ~expectedDirection~0); 1494284#L2976-3 cleanup_~i~0 := 0; 1494275#L188-2 [2019-12-07 15:34:43,679 INFO L796 eck$LassoCheckResult]: Loop: 1494275#L188-2 assume !false; 1494271#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 1494253#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 1494250#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 1492346#L196 assume 1 != cleanup_~tmp___0~0; 1492339#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1492329#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1492323#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 1492321#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 1492307#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 1492306#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 1473292#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1473234#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1473225#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1469992#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1451367#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1469912#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1469903#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1469896#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1469892#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1469887#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1469883#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1469880#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1469875#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1469877#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1474179#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1474156#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1469844#L1766-12 assume !(1 == ~doorState~0); 1469842#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1469838#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1469830#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1469827#L1401-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1469825#L1048-26 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1469823#L1217-26 assume !(0 == ~currentFloorID~0); 1469817#L1223-26 assume ~currentFloorID~0 > 0; 1469816#L1224-26 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1469813#L2214-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1469810#L2241-275 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1469807#L1228-26 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1433668#L1370-26 stopRequestedInDirection_#t~ret42 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret42;havoc stopRequestedInDirection_#t~ret42;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1440698#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1442773#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1435930#L1463-12 assume !(1 == ~currentHeading~0); 1433834#L1473-36 assume !(0 == ~currentFloorID~0); 1433835#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1433805#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1496270#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1496268#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1496237#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1495259#L2975-4 assume !(1 == ~expectedDirection~0); 1494285#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1494275#L188-2 [2019-12-07 15:34:43,679 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:43,679 INFO L82 PathProgramCache]: Analyzing trace with hash 1117751291, now seen corresponding path program 1 times [2019-12-07 15:34:43,680 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:43,680 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1631773055] [2019-12-07 15:34:43,680 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:43,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:43,731 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:43,731 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1631773055] [2019-12-07 15:34:43,732 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:43,732 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:43,732 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [815417053] [2019-12-07 15:34:43,732 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:43,733 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:43,733 INFO L82 PathProgramCache]: Analyzing trace with hash -1318191518, now seen corresponding path program 1 times [2019-12-07 15:34:43,733 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:43,733 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [795039874] [2019-12-07 15:34:43,733 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:43,744 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:43,790 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:43,791 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [795039874] [2019-12-07 15:34:43,791 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:43,791 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:34:43,791 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933014478] [2019-12-07 15:34:43,791 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:43,791 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:43,791 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:34:43,791 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:34:43,791 INFO L87 Difference]: Start difference. First operand 103118 states and 189304 transitions. cyclomatic complexity: 86189 Second operand 5 states. [2019-12-07 15:34:45,475 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:45,475 INFO L93 Difference]: Finished difference Result 365320 states and 678906 transitions. [2019-12-07 15:34:45,475 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 15:34:45,475 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 365320 states and 678906 transitions. [2019-12-07 15:34:46,642 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 93155 [2019-12-07 15:34:47,579 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 365320 states to 365320 states and 678906 transitions. [2019-12-07 15:34:47,579 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 365320 [2019-12-07 15:34:47,829 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 365320 [2019-12-07 15:34:47,830 INFO L73 IsDeterministic]: Start isDeterministic. Operand 365320 states and 678906 transitions. [2019-12-07 15:34:48,004 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:34:48,004 INFO L688 BuchiCegarLoop]: Abstraction has 365320 states and 678906 transitions. [2019-12-07 15:34:48,211 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 365320 states and 678906 transitions. [2019-12-07 15:34:52,874 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 365320 to 148741. [2019-12-07 15:34:52,874 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 148741 states. [2019-12-07 15:34:53,068 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 148741 states to 148741 states and 271014 transitions. [2019-12-07 15:34:53,068 INFO L711 BuchiCegarLoop]: Abstraction has 148741 states and 271014 transitions. [2019-12-07 15:34:53,068 INFO L591 BuchiCegarLoop]: Abstraction has 148741 states and 271014 transitions. [2019-12-07 15:34:53,068 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-12-07 15:34:53,068 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 148741 states and 271014 transitions. [2019-12-07 15:34:53,384 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 38076 [2019-12-07 15:34:53,384 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:34:53,384 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:34:53,388 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:53,388 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:34:53,389 INFO L794 eck$LassoCheckResult]: Stem: 1906134#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 1906135#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 1904056#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 1904057#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 1904644#L385 assume 0 != main_~tmp~8; 1911245#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1907483#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 1907331#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 1905485#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1907201#L2485 assume 0 == initPersonOnFloor_~floor; 1910814#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1902680#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1906736#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1908727#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1910368#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1910369#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1911812#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1903303#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1903248#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1907623#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1906511#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1905852#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1906977#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1913238#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1913237#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1913236#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1913235#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1913234#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 1913233#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1913231#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1913230#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1913228#L1675 assume !(0 != timeShift_~tmp___9~2); 1913227#L1766 assume !(1 == ~doorState~0); 1913226#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1913224#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1913219#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1913218#L1401 assume 0 != stopRequestedInDirection_~overload~0; 1913216#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1913217#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1913387#L1217 assume !(0 == ~currentFloorID~0); 1913383#L1223 assume ~currentFloorID~0 > 0; 1913380#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1913375#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1913371#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1913263#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1913146#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1913143#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1913144#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1921731#L1463 assume !(1 == ~currentHeading~0); 1921724#L1473 assume !(0 == ~currentFloorID~0); 1921719#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1921716#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1921714#L2963 assume !(-1 == ~expectedDirection~0); 1921712#L2975 assume !(1 == ~expectedDirection~0); 1921708#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1921707#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1921706#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1921705#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1912465#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1921704#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1974248#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1974246#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1974247#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1975208#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1975209#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1975222#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1975220#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1975212#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1975210#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1975189#L1675-1 assume !(0 != timeShift_~tmp___9~2); 1924211#L1766-3 assume !(1 == ~doorState~0); 1924108#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1924106#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1924100#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1924098#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 1924096#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1924094#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1924093#L1217-6 assume !(0 == ~currentFloorID~0); 1924091#L1223-6 assume ~currentFloorID~0 > 0; 1924090#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1923940#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1923931#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1923820#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1923712#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1923708#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1923693#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1923685#L1463-3 assume !(1 == ~currentHeading~0); 1923659#L1473-9 assume !(0 == ~currentFloorID~0); 1923656#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1923654#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1923652#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1923653#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 1974884#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 1974881#L2975-1 assume !(1 == ~expectedDirection~0); 1974879#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1974878#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1974877#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 1974876#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1966924#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1974871#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1974868#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 1974866#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1974865#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 1974863#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 1972560#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 1974852#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1974848#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 1974842#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 1974840#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 1974838#L1675-2 assume !(0 != timeShift_~tmp___9~2); 1919042#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1919041#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1919030#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1919026#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1919025#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 1919023#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1919024#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1919394#L1217-12 assume !(0 == ~currentFloorID~0); 1919391#L1223-12 assume ~currentFloorID~0 > 0; 1919389#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1919365#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1919346#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1919336#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1919318#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1918931#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1918932#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1933807#L1463-6 assume !(1 == ~currentHeading~0); 1933804#L1473-18 assume !(0 == ~currentFloorID~0); 1933800#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1933799#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1933797#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1933798#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2015086#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2015083#L2975-2 assume !(1 == ~expectedDirection~0); 2015081#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2015080#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2015074#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2015073#L2485-1 assume 0 == initPersonOnFloor_~floor; 2015055#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2015038#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2015035#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2015032#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2015031#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2015030#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2015029#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2005499#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015024#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2015021#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2015019#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2015018#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2015017#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2009552#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015016#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2015014#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2014996#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2014993#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2014981#L1675-3 assume !(0 != timeShift_~tmp___9~2); 1929604#L1766-9 assume !(1 == ~doorState~0); 1929080#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1928469#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1928464#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1928463#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 1927034#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1927035#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1927403#L1217-18 assume !(0 == ~currentFloorID~0); 1927402#L1223-18 assume ~currentFloorID~0 > 0; 1927400#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1927379#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1927359#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1927351#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1927335#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1927327#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1927328#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1939399#L1463-9 assume !(1 == ~currentHeading~0); 1939398#L1473-27 assume !(0 == ~currentFloorID~0); 1939396#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1926105#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1939393#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1939394#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2015697#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2015693#L2975-3 assume !(1 == ~expectedDirection~0); 2015684#L2976-3 cleanup_~i~0 := 0; 2015683#L188-2 [2019-12-07 15:34:53,389 INFO L796 eck$LassoCheckResult]: Loop: 2015683#L188-2 assume !false; 2015682#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2015681#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 2015680#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2015679#L196 assume 1 != cleanup_~tmp___0~0; 2015678#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2015658#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2015634#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 2015611#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 2015596#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 2015594#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2015592#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2015590#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2015588#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2015585#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2015582#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015579#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2015576#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2015574#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2015573#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2015571#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2014523#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2015561#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2015556#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2015544#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2015538#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2015536#L1675-4 assume !(0 != timeShift_~tmp___9~2); 1931024#L1766-12 assume !(1 == ~doorState~0); 1926783#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 1926784#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 1926773#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 1926774#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 1926735#L1402-8 assume !(0 != stopRequestedInDirection_~buttonPressed~0);stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 1926737#L1048-25 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 1926728#L1217-25 assume !(0 == ~currentFloorID~0); 1926729#L1223-25 assume ~currentFloorID~0 > 0; 1926872#L1224-25 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 1926863#L2214-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 1926852#L2241-265 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 1926723#L1228-25 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 1926725#L1370-25 stopRequestedInDirection_#t~ret41 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret41;havoc stopRequestedInDirection_#t~ret41;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 1926929#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 1926930#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 1939392#L1463-12 assume !(1 == ~currentHeading~0); 1939390#L1473-36 assume !(0 == ~currentFloorID~0); 1939388#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1925983#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 1939386#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 1939387#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2015699#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2015689#L2975-4 assume !(1 == ~expectedDirection~0); 2015685#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2015683#L188-2 [2019-12-07 15:34:53,390 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:53,390 INFO L82 PathProgramCache]: Analyzing trace with hash -124285972, now seen corresponding path program 1 times [2019-12-07 15:34:53,390 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:53,390 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [65036859] [2019-12-07 15:34:53,390 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:53,403 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:53,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:53,444 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [65036859] [2019-12-07 15:34:53,444 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:53,444 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:34:53,444 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [843173427] [2019-12-07 15:34:53,444 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:34:53,445 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:34:53,445 INFO L82 PathProgramCache]: Analyzing trace with hash 1297388381, now seen corresponding path program 1 times [2019-12-07 15:34:53,445 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:34:53,445 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [385302926] [2019-12-07 15:34:53,445 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:34:53,450 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:34:53,464 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:34:53,464 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [385302926] [2019-12-07 15:34:53,464 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:34:53,464 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:34:53,465 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1581435109] [2019-12-07 15:34:53,465 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:34:53,465 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:34:53,465 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:34:53,465 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:34:53,465 INFO L87 Difference]: Start difference. First operand 148741 states and 271014 transitions. cyclomatic complexity: 122276 Second operand 5 states. [2019-12-07 15:34:56,535 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:34:56,535 INFO L93 Difference]: Finished difference Result 631028 states and 1168027 transitions. [2019-12-07 15:34:56,536 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 15:34:56,536 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 631028 states and 1168027 transitions. [2019-12-07 15:34:59,155 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 177354 [2019-12-07 15:35:04,714 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 631028 states to 631028 states and 1168027 transitions. [2019-12-07 15:35:04,714 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 631028 [2019-12-07 15:35:04,960 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 631028 [2019-12-07 15:35:04,960 INFO L73 IsDeterministic]: Start isDeterministic. Operand 631028 states and 1168027 transitions. [2019-12-07 15:35:05,162 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:35:05,162 INFO L688 BuchiCegarLoop]: Abstraction has 631028 states and 1168027 transitions. [2019-12-07 15:35:05,429 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 631028 states and 1168027 transitions. [2019-12-07 15:35:07,361 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 631028 to 149281. [2019-12-07 15:35:07,361 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 149281 states. [2019-12-07 15:35:07,769 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 149281 states to 149281 states and 271644 transitions. [2019-12-07 15:35:07,769 INFO L711 BuchiCegarLoop]: Abstraction has 149281 states and 271644 transitions. [2019-12-07 15:35:07,769 INFO L591 BuchiCegarLoop]: Abstraction has 149281 states and 271644 transitions. [2019-12-07 15:35:07,769 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-12-07 15:35:07,770 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 149281 states and 271644 transitions. [2019-12-07 15:35:08,028 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 38202 [2019-12-07 15:35:08,028 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:35:08,028 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:35:08,032 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:35:08,032 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:35:08,032 INFO L794 eck$LassoCheckResult]: Stem: 2685938#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 2685939#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 2683854#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 2683855#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 2684452#L385 assume 0 != main_~tmp~8; 2691347#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2687352#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2687197#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2685299#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2687057#L2485 assume 0 == initPersonOnFloor_~floor; 2690849#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2682484#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2686567#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2688620#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2690374#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2690375#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2691941#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2683122#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2683067#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2687495#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2686329#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2685664#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2686820#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2685009#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2685011#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2690376#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2689205#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2689206#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 2688670#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2688671#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2692500#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2692501#L1675 assume !(0 != timeShift_~tmp___9~2); 2691419#L1766 assume !(1 == ~doorState~0); 2691420#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2690887#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2683952#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2683953#L1401 assume 0 != stopRequestedInDirection_~overload~0; 2688648#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2688649#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2688181#L1217 assume !(0 == ~currentFloorID~0); 2688182#L1223 assume ~currentFloorID~0 > 0; 2689092#L1224 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2689093#L2214-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2695732#L2241-6 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2695729#L1228 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2695730#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2696024#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2696025#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2696318#L1463 assume !(1 == ~currentHeading~0); 2696317#L1473 assume !(0 == ~currentFloorID~0); 2696315#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2695025#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2696265#L2963 assume !(-1 == ~expectedDirection~0); 2696266#L2975 assume !(1 == ~expectedDirection~0); 2696203#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2696204#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2696195#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2696196#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2694880#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2696189#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2736417#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2736413#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2736414#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2776940#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2724931#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2775704#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2775702#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2775700#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2775684#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2775685#L1675-1 assume !(0 != timeShift_~tmp___9~2); 2775314#L1766-3 assume !(1 == ~doorState~0); 2775283#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2775281#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2775272#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2775311#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 2775310#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2775264#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2775303#L1217-6 assume !(0 == ~currentFloorID~0); 2775300#L1223-6 assume ~currentFloorID~0 > 0; 2775298#L1224-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2775299#L2214-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2775305#L2241-67 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2775302#L1228-6 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2682293#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2821271#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2821272#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2684313#L1463-3 assume !(1 == ~currentHeading~0); 2682223#L1473-9 assume !(0 == ~currentFloorID~0); 2682224#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2682195#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2788351#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2784143#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2788350#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2784096#L2975-1 assume !(1 == ~expectedDirection~0); 2784092#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2784089#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2784083#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2784082#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2697038#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2731260#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2731255#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2731252#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2731249#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2731246#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2731247#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2766959#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2766958#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2766955#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2789031#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2789017#L1675-2 assume !(0 != timeShift_~tmp___9~2); 2720986#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2720959#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2720957#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2720949#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2720984#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 2720983#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2720941#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2720982#L1217-12 assume !(0 == ~currentFloorID~0); 2720981#L1223-12 assume ~currentFloorID~0 > 0; 2720979#L1224-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2720976#L2214-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2720973#L2241-128 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2720971#L1228-12 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2720972#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2721225#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2721226#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2684324#L1463-6 assume !(1 == ~currentHeading~0); 2682214#L1473-18 assume !(0 == ~currentFloorID~0); 2682215#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2718351#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2804617#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2804610#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2804616#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2804606#L2975-2 assume !(1 == ~expectedDirection~0); 2803696#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 2802858#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 2802852#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2802851#L2485-1 assume 0 == initPersonOnFloor_~floor; 2802688#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2802671#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2802664#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2802656#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2802655#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2802654#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2802649#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2699050#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2731772#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2731769#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2731767#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2731768#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2790071#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2752984#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2789135#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2730019#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2730016#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2729965#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2729966#L1675-3 assume !(0 != timeShift_~tmp___9~2); 2713865#L1766-9 assume !(1 == ~doorState~0); 2713854#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2713852#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2713843#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2714237#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 2714236#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2713835#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2714232#L1217-18 assume !(0 == ~currentFloorID~0); 2714230#L1223-18 assume ~currentFloorID~0 > 0; 2714227#L1224-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2714203#L2214-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2714181#L2241-189 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2714171#L1228-18 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2714155#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2714100#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2714101#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2684294#L1463-9 assume !(1 == ~currentHeading~0); 2684295#L1473-27 assume !(0 == ~currentFloorID~0); 2812430#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2713548#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2812428#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2805295#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2806434#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2805290#L2975-3 assume !(1 == ~expectedDirection~0); 2804824#L2976-3 cleanup_~i~0 := 0; 2804823#L188-2 [2019-12-07 15:35:08,033 INFO L796 eck$LassoCheckResult]: Loop: 2804823#L188-2 assume !false; 2804822#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 2804821#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 2804820#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 2804819#L196 assume 1 != cleanup_~tmp___0~0; 2804817#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2804806#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2804760#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 2804754#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 2804739#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 2804738#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 2804737#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2804736#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2804730#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 2804728#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2704917#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2793265#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2688760#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 2790760#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 2787731#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 2787730#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 2732194#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 2787365#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2787265#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 2787262#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 2730260#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 2730261#L1675-4 assume !(0 != timeShift_~tmp___9~2); 2712424#L1766-12 assume !(1 == ~doorState~0); 2712413#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 2712411#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 2712402#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 2712685#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 2712684#L1402-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 2712394#L1048-24 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 2712678#L1217-24 assume !(0 == ~currentFloorID~0); 2712675#L1223-24 assume ~currentFloorID~0 > 0; 2712672#L1224-24 assume 0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 2712673#L2214-255 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 2712677#L2241-255 stopRequestedInDirection__wrappee__weight_#t~ret34 := isFloorCalling_#res;stopRequestedInDirection__wrappee__weight_~tmp___9~0 := stopRequestedInDirection__wrappee__weight_#t~ret34;havoc stopRequestedInDirection__wrappee__weight_#t~ret34; 2712669#L1228-24 assume 0 != stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 2712671#L1370-24 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 2712720#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 2712721#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 2806595#L1463-12 assume !(1 == ~currentHeading~0); 2806593#L1473-36 assume !(0 == ~currentFloorID~0); 2806591#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2712049#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 2806590#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 2804868#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 2806582#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 2804858#L2975-4 assume !(1 == ~expectedDirection~0); 2804825#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2804823#L188-2 [2019-12-07 15:35:08,033 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:35:08,033 INFO L82 PathProgramCache]: Analyzing trace with hash -124285972, now seen corresponding path program 2 times [2019-12-07 15:35:08,033 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:35:08,033 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1977353219] [2019-12-07 15:35:08,033 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:35:08,044 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:35:08,090 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:35:08,090 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1977353219] [2019-12-07 15:35:08,091 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:35:08,091 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:35:08,091 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2105840356] [2019-12-07 15:35:08,091 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:35:08,091 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:35:08,091 INFO L82 PathProgramCache]: Analyzing trace with hash 486337502, now seen corresponding path program 1 times [2019-12-07 15:35:08,091 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:35:08,092 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [884461126] [2019-12-07 15:35:08,092 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:35:08,097 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:35:08,104 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:35:08,105 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [884461126] [2019-12-07 15:35:08,105 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:35:08,105 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 15:35:08,105 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1834691341] [2019-12-07 15:35:08,105 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:35:08,105 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:35:08,105 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 15:35:08,106 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 15:35:08,106 INFO L87 Difference]: Start difference. First operand 149281 states and 271644 transitions. cyclomatic complexity: 122366 Second operand 3 states. [2019-12-07 15:35:09,134 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:35:09,135 INFO L93 Difference]: Finished difference Result 259511 states and 477124 transitions. [2019-12-07 15:35:09,135 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 15:35:09,135 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 259511 states and 477124 transitions. [2019-12-07 15:35:10,010 INFO L131 ngComponentsAnalysis]: Automaton has 5 accepting balls. 68156 [2019-12-07 15:35:10,969 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 259511 states to 259511 states and 477124 transitions. [2019-12-07 15:35:10,969 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 259511 [2019-12-07 15:35:11,101 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 259511 [2019-12-07 15:35:11,101 INFO L73 IsDeterministic]: Start isDeterministic. Operand 259511 states and 477124 transitions. [2019-12-07 15:35:11,208 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:35:11,208 INFO L688 BuchiCegarLoop]: Abstraction has 259511 states and 477124 transitions. [2019-12-07 15:35:11,324 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 259511 states and 477124 transitions. [2019-12-07 15:35:12,485 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 259511 to 141385. [2019-12-07 15:35:12,486 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 141385 states. [2019-12-07 15:35:12,671 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 141385 states to 141385 states and 257540 transitions. [2019-12-07 15:35:12,671 INFO L711 BuchiCegarLoop]: Abstraction has 141385 states and 257540 transitions. [2019-12-07 15:35:12,671 INFO L591 BuchiCegarLoop]: Abstraction has 141385 states and 257540 transitions. [2019-12-07 15:35:12,671 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-12-07 15:35:12,671 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 141385 states and 257540 transitions. [2019-12-07 15:35:12,972 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 36424 [2019-12-07 15:35:12,973 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:35:12,973 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:35:12,977 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:35:12,977 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:35:12,977 INFO L794 eck$LassoCheckResult]: Stem: 3094371#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string72.base, #t~string72.offset := #Ultimate.allocOnStack(10);call #t~string74.base, #t~string74.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string74.base, #t~string74.offset, 1);call write~init~int(95, #t~string74.base, 1 + #t~string74.offset, 1);call write~init~int(93, #t~string74.base, 2 + #t~string74.offset, 1);call write~init~int(0, #t~string74.base, 3 + #t~string74.offset, 1);call #t~string76.base, #t~string76.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string76.base, #t~string76.offset, 1);call write~init~int(93, #t~string76.base, 1 + #t~string76.offset, 1);call write~init~int(32, #t~string76.base, 2 + #t~string76.offset, 1);call write~init~int(0, #t~string76.base, 3 + #t~string76.offset, 1);call #t~string78.base, #t~string78.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string78.base, #t~string78.offset, 1);call write~init~int(97, #t~string78.base, 1 + #t~string78.offset, 1);call write~init~int(116, #t~string78.base, 2 + #t~string78.offset, 1);call write~init~int(32, #t~string78.base, 3 + #t~string78.offset, 1);call write~init~int(0, #t~string78.base, 4 + #t~string78.offset, 1);call #t~string80.base, #t~string80.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string80.base, #t~string80.offset, 1);call write~init~int(105, #t~string80.base, 1 + #t~string80.offset, 1);call write~init~int(0, #t~string80.base, 2 + #t~string80.offset, 1);call #t~string82.base, #t~string82.offset := #Ultimate.allocOnStack(10);call #t~string84.base, #t~string84.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string84.base, #t~string84.offset, 1);call write~init~int(112, #t~string84.base, 1 + #t~string84.offset, 1);call write~init~int(0, #t~string84.base, 2 + #t~string84.offset, 1);call #t~string86.base, #t~string86.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string86.base, #t~string86.offset, 1);call write~init~int(111, #t~string86.base, 1 + #t~string86.offset, 1);call write~init~int(119, #t~string86.base, 2 + #t~string86.offset, 1);call write~init~int(110, #t~string86.base, 3 + #t~string86.offset, 1);call write~init~int(0, #t~string86.base, 4 + #t~string86.offset, 1);call #t~string88.base, #t~string88.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string88.base, #t~string88.offset, 1);call write~init~int(73, #t~string88.base, 1 + #t~string88.offset, 1);call write~init~int(76, #t~string88.base, 2 + #t~string88.offset, 1);call write~init~int(95, #t~string88.base, 3 + #t~string88.offset, 1);call write~init~int(112, #t~string88.base, 4 + #t~string88.offset, 1);call write~init~int(58, #t~string88.base, 5 + #t~string88.offset, 1);call write~init~int(0, #t~string88.base, 6 + #t~string88.offset, 1);call #t~string90.base, #t~string90.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string90.base, #t~string90.offset, 1);call write~init~int(37, #t~string90.base, 1 + #t~string90.offset, 1);call write~init~int(105, #t~string90.base, 2 + #t~string90.offset, 1);call write~init~int(0, #t~string90.base, 3 + #t~string90.offset, 1);call #t~string92.base, #t~string92.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string92.base, #t~string92.offset, 1);call write~init~int(37, #t~string92.base, 1 + #t~string92.offset, 1);call write~init~int(105, #t~string92.base, 2 + #t~string92.offset, 1);call write~init~int(0, #t~string92.base, 3 + #t~string92.offset, 1);call #t~string94.base, #t~string94.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string94.base, #t~string94.offset, 1);call write~init~int(37, #t~string94.base, 1 + #t~string94.offset, 1);call write~init~int(105, #t~string94.base, 2 + #t~string94.offset, 1);call write~init~int(0, #t~string94.base, 3 + #t~string94.offset, 1);call #t~string96.base, #t~string96.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string96.base, #t~string96.offset, 1);call write~init~int(37, #t~string96.base, 1 + #t~string96.offset, 1);call write~init~int(105, #t~string96.base, 2 + #t~string96.offset, 1);call write~init~int(0, #t~string96.base, 3 + #t~string96.offset, 1);call #t~string98.base, #t~string98.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string98.base, #t~string98.offset, 1);call write~init~int(37, #t~string98.base, 1 + #t~string98.offset, 1);call write~init~int(105, #t~string98.base, 2 + #t~string98.offset, 1);call write~init~int(0, #t~string98.base, 3 + #t~string98.offset, 1);call #t~string100.base, #t~string100.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string100.base, #t~string100.offset, 1);call write~init~int(70, #t~string100.base, 1 + #t~string100.offset, 1);call write~init~int(95, #t~string100.base, 2 + #t~string100.offset, 1);call write~init~int(112, #t~string100.base, 3 + #t~string100.offset, 1);call write~init~int(58, #t~string100.base, 4 + #t~string100.offset, 1);call write~init~int(0, #t~string100.base, 5 + #t~string100.offset, 1);call #t~string103.base, #t~string103.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string103.base, #t~string103.offset, 1);call write~init~int(37, #t~string103.base, 1 + #t~string103.offset, 1);call write~init~int(105, #t~string103.base, 2 + #t~string103.offset, 1);call write~init~int(0, #t~string103.base, 3 + #t~string103.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string106.base, #t~string106.offset, 1);call write~init~int(37, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(105, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string109.base, #t~string109.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string109.base, #t~string109.offset, 1);call write~init~int(37, #t~string109.base, 1 + #t~string109.offset, 1);call write~init~int(105, #t~string109.base, 2 + #t~string109.offset, 1);call write~init~int(0, #t~string109.base, 3 + #t~string109.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string112.base, #t~string112.offset, 1);call write~init~int(37, #t~string112.base, 1 + #t~string112.offset, 1);call write~init~int(105, #t~string112.base, 2 + #t~string112.offset, 1);call write~init~int(0, #t~string112.base, 3 + #t~string112.offset, 1);call #t~string115.base, #t~string115.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string115.base, #t~string115.offset, 1);call write~init~int(37, #t~string115.base, 1 + #t~string115.offset, 1);call write~init~int(105, #t~string115.base, 2 + #t~string115.offset, 1);call write~init~int(0, #t~string115.base, 3 + #t~string115.offset, 1);call #t~string117.base, #t~string117.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string117.base, #t~string117.offset, 1);call write~init~int(0, #t~string117.base, 1 + #t~string117.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(30);call #t~string152.base, #t~string152.offset := #Ultimate.allocOnStack(9);call #t~string153.base, #t~string153.offset := #Ultimate.allocOnStack(21);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(30);call #t~string155.base, #t~string155.offset := #Ultimate.allocOnStack(9);call #t~string156.base, #t~string156.offset := #Ultimate.allocOnStack(21);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(30);call #t~string161.base, #t~string161.offset := #Ultimate.allocOnStack(9);call #t~string162.base, #t~string162.offset := #Ultimate.allocOnStack(25);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(30);call #t~string164.base, #t~string164.offset := #Ultimate.allocOnStack(9);call #t~string165.base, #t~string165.offset := #Ultimate.allocOnStack(25);~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~expectedDirection~0 := 0;~head~0.base, ~head~0.offset := 0, 0; 3094372#L-1 havoc main_#res;havoc main_#t~ret13, main_~retValue_acc~1, main_~tmp~8;havoc main_~retValue_acc~1;havoc main_~tmp~8; 3092669#L3392 havoc valid_product_#res;havoc valid_product_~retValue_acc~27;havoc valid_product_~retValue_acc~27;valid_product_~retValue_acc~27 := 1;valid_product_#res := valid_product_~retValue_acc~27; 3092670#L3400 main_#t~ret13 := valid_product_#res;main_~tmp~8 := main_#t~ret13;havoc main_#t~ret13; 3093251#L385 assume 0 != main_~tmp~8; 3099425#L358 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3095584#L2207 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3095446#L444 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3093968#L469 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3095310#L2485 assume 0 == initPersonOnFloor_~floor; 3098941#L2486 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3091263#L2593-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3094911#L2277 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3096827#L2289-2 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3098473#L844 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3098474#L896 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3099988#L2832 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3091896#L2894 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3091838#L2904 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3095731#L2915 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3094707#L2926 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3094212#L2937 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3095118#L2938 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3095198#L1525 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3098475#L844-1 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3098476#L861-10 assume !(0 == buttonForFloorIsPressed_~floorID); 3097400#L865-10 assume !(1 == buttonForFloorIsPressed_~floorID); 3097401#L869-10 assume !(2 == buttonForFloorIsPressed_~floorID); 3096876#L873-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3096877#L882-10 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3099683#L1536 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3100621#L1675 assume !(0 != timeShift_~tmp___9~2); 3100617#L1766 assume !(1 == ~doorState~0); 3099484#L1766-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3098980#L1428 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3098590#L1449 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3097172#L1401 assume 0 != stopRequestedInDirection_~overload~0; 3097173#L1402 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3097274#L1048 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3097275#L1217 assume !(0 == ~currentFloorID~0); 3097116#L1223 assume ~currentFloorID~0 > 0; 3097117#L1224 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3100897#L1238 assume ~currentFloorID~0 > 0; 3100214#L1240 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3100216#L1241 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3102707#L1370 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3102667#L1419 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3102668#L1774 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3093162#L1463 assume !(1 == ~currentHeading~0); 3091312#L1473 assume !(0 == ~currentFloorID~0); 3091313#L1473-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3101161#L1479-5 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3118691#L2963 assume !(-1 == ~expectedDirection~0); 3118685#L2975 assume !(1 == ~expectedDirection~0); 3118675#L2976 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3118665#L844-2 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3118666#L896-3 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3118657#L2832-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3101136#L2894-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3122696#L861-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3141365#L882-17 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3141363#L2898-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3141362#L2938-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3141360#L1525-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3141252#L844-3 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3141359#L861-22 assume !(0 == buttonForFloorIsPressed_~floorID); 3141357#L865-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3141301#L882-22 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3141300#L1536-1 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3141294#L1675-1 assume !(0 != timeShift_~tmp___9~2); 3111757#L1766-3 assume !(1 == ~doorState~0); 3111755#L1766-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3111749#L1428-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3111742#L1449-2 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3111738#L1401-2 assume 0 != stopRequestedInDirection_~overload~0; 3111728#L1402-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3111719#L1048-6 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3111714#L1217-6 assume !(0 == ~currentFloorID~0); 3111707#L1223-6 assume ~currentFloorID~0 > 0; 3111705#L1224-6 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3111699#L1238-6 assume ~currentFloorID~0 > 0; 3111700#L1240-6 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3111773#L1241-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3111769#L1370-6 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3111736#L1419-2 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3111737#L1774-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3093129#L1463-3 assume !(1 == ~currentHeading~0); 3090993#L1473-9 assume !(0 == ~currentFloorID~0); 3090994#L1473-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3090972#L1479-11 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3124863#L2963-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3124861#L896-4 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3124862#L2967-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3123935#L2975-1 assume !(1 == ~expectedDirection~0); 3123934#L2976-1 havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3123919#L844-4 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3123913#L896-6 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3123914#L2832-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3140624#L2894-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3140613#L861-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3140608#L882-29 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3140603#L2898-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3140604#L2938-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3150006#L1525-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3149980#L844-5 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3149977#L861-34 assume !(0 == buttonForFloorIsPressed_~floorID); 3149972#L865-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3149966#L882-34 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3149964#L1536-2 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3149960#L1675-2 assume !(0 != timeShift_~tmp___9~2); 3118573#L1766-6 assume 1 == ~doorState~0;~doorState~0 := 0; 3118571#L1766-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3118568#L1428-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3118558#L1449-4 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3118554#L1401-4 assume 0 != stopRequestedInDirection_~overload~0; 3118550#L1402-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3118540#L1048-12 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3118535#L1217-12 assume !(0 == ~currentFloorID~0); 3118528#L1223-12 assume ~currentFloorID~0 > 0; 3118526#L1224-12 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3118520#L1238-12 assume ~currentFloorID~0 > 0; 3118521#L1240-12 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3118596#L1241-12 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3118587#L1370-12 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3118578#L1419-4 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3118579#L1774-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3139124#L1463-6 assume !(1 == ~currentHeading~0); 3139121#L1473-18 assume !(0 == ~currentFloorID~0); 3139119#L1473-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3139118#L1479-17 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3139117#L2963-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3138468#L896-7 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3138974#L2967-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3138464#L2975-2 assume !(1 == ~expectedDirection~0); 3138462#L2976-2 havoc bobCall_#t~ret1, bobCall_~tmp~0;havoc bobCall_~tmp~0;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~3;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~3; 3138461#L444-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~3 := 4;getOrigin_#res := getOrigin_~retValue_acc~3; 3138455#L469-1 bobCall_#t~ret1 := getOrigin_#res;bobCall_~tmp~0 := bobCall_#t~ret1;havoc bobCall_#t~ret1;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~0;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3138453#L2485-1 assume 0 == initPersonOnFloor_~floor; 3138454#L2486-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3144595#L2593-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3137772#L2277-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3137770#L2289-5 havoc cleanup_#t~ret7, cleanup_#t~ret8, cleanup_~i~0, cleanup_~tmp~6, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~0;havoc cleanup_~i~0;havoc cleanup_~tmp~6;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~0;havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3137749#L844-6 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3137750#L896-9 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3137708#L2832-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3103126#L2894-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3142871#L861-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3142821#L882-41 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3142802#L2898-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3142803#L2938-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3157279#L1525-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3157280#L844-7 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3157287#L861-46 assume !(0 == buttonForFloorIsPressed_~floorID); 3157286#L865-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3157282#L882-46 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3157281#L1536-3 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3157254#L1675-3 assume !(0 != timeShift_~tmp___9~2); 3117348#L1766-9 assume !(1 == ~doorState~0); 3117346#L1766-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3117339#L1428-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3117334#L1449-6 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3117330#L1401-6 assume 0 != stopRequestedInDirection_~overload~0; 3117326#L1402-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3117322#L1048-18 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3117313#L1217-18 assume !(0 == ~currentFloorID~0); 3117308#L1223-18 assume ~currentFloorID~0 > 0; 3117307#L1224-18 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3117299#L1238-18 assume ~currentFloorID~0 > 0; 3117300#L1240-18 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3117416#L1241-18 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3117411#L1370-18 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3117354#L1419-6 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3117355#L1774-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3146112#L1463-9 assume !(1 == ~currentHeading~0); 3150158#L1473-27 assume !(0 == ~currentFloorID~0); 3150118#L1473-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3150115#L1479-23 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3150112#L2963-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3150113#L896-10 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3156859#L2967-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3156854#L2975-3 assume !(1 == ~expectedDirection~0); 3156846#L2976-3 cleanup_~i~0 := 0; 3156845#L188-2 [2019-12-07 15:35:12,978 INFO L796 eck$LassoCheckResult]: Loop: 3156845#L188-2 assume !false; 3156844#L189 cleanup_~__cil_tmp4~0 := ~cleanupTimeShifts~0 - 1; 3156843#L192 assume cleanup_~i~0 < cleanup_~__cil_tmp4~0;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~5;havoc isBlocked_~retValue_acc~5;isBlocked_~retValue_acc~5 := 0;isBlocked_#res := isBlocked_~retValue_acc~5; 3156842#L691 cleanup_#t~ret7 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret7;havoc cleanup_#t~ret7; 3156841#L196 assume 1 != cleanup_~tmp___0~0; 3156840#L196-1 havoc isIdle_#res;havoc isIdle_#t~ret27, isIdle_~retValue_acc~12, isIdle_~tmp~14;havoc isIdle_~retValue_acc~12;havoc isIdle_~tmp~14;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret22, anyStopRequested_#t~ret23, anyStopRequested_#t~ret24, anyStopRequested_#t~ret25, anyStopRequested_#t~ret26, anyStopRequested_~retValue_acc~11, anyStopRequested_~tmp~13, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~11;havoc anyStopRequested_~tmp~13;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~20;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~20; 3156837#L2214-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~20 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~20; 3156834#L2241-244 anyStopRequested_#t~ret22 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret22;havoc anyStopRequested_#t~ret22; 3156833#L952 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~11 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~11; 3156819#L1016 isIdle_#t~ret27 := anyStopRequested_#res;isIdle_~tmp~14 := isIdle_#t~ret27;havoc isIdle_#t~ret27;isIdle_~retValue_acc~12 := (if 0 == isIdle_~tmp~14 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~12; 3156818#L1029 cleanup_#t~ret8 := isIdle_#res;cleanup_~tmp~6 := cleanup_#t~ret8;havoc cleanup_#t~ret8; 3156817#L208 assume !(0 != cleanup_~tmp~6);havoc timeShift_#t~ret61, timeShift_#t~ret62, timeShift_#t~ret63, timeShift_#t~ret64, timeShift_#t~ret65, timeShift_#t~ret66, timeShift_#t~ret67, timeShift_#t~ret68, timeShift_#t~ret69, timeShift_#t~ret70, timeShift_#t~ret71, timeShift_~tmp~21, timeShift_~tmp___0~9, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~21;havoc timeShift_~tmp___0~9;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret119, __utac_acc__Specification3_spec__1_#t~ret120, __utac_acc__Specification3_spec__1_#t~ret121, __utac_acc__Specification3_spec__1_#t~ret122, __utac_acc__Specification3_spec__1_#t~ret123, __utac_acc__Specification3_spec__1_#t~ret124, __utac_acc__Specification3_spec__1_#t~ret125, __utac_acc__Specification3_spec__1_#t~ret126, __utac_acc__Specification3_spec__1_#t~ret127, __utac_acc__Specification3_spec__1_#t~ret128, __utac_acc__Specification3_spec__1_#t~ret129, __utac_acc__Specification3_spec__1_#t~ret130, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~23, __utac_acc__Specification3_spec__1_~tmp___0~11, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~23;havoc __utac_acc__Specification3_spec__1_~tmp___0~11;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3156816#L844-8 __utac_acc__Specification3_spec__1_#t~ret119 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~23 := __utac_acc__Specification3_spec__1_#t~ret119;havoc __utac_acc__Specification3_spec__1_#t~ret119;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~23;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3156815#L896-12 __utac_acc__Specification3_spec__1_#t~ret120 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret120;havoc __utac_acc__Specification3_spec__1_#t~ret120; 3156748#L2832-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3156746#L2894-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3156742#L861-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3156735#L882-53 __utac_acc__Specification3_spec__1_#t~ret126 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret126;havoc __utac_acc__Specification3_spec__1_#t~ret126; 3156732#L2898-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 3156733#L2938-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret46, stopRequestedAtCurrentFloor_#t~ret47, stopRequestedAtCurrentFloor_#t~ret48, stopRequestedAtCurrentFloor_~retValue_acc~17, stopRequestedAtCurrentFloor_~tmp~19, stopRequestedAtCurrentFloor_~tmp___0~7, stopRequestedAtCurrentFloor_~__cil_tmp4~1, stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc stopRequestedAtCurrentFloor_~retValue_acc~17;havoc stopRequestedAtCurrentFloor_~tmp~19;havoc stopRequestedAtCurrentFloor_~tmp___0~7;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~1;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~0;stopRequestedAtCurrentFloor_~__cil_tmp4~1 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~0 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~1 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~1 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~1 / 3); 3157627#L1525-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~6;havoc getCurrentFloorID_~retValue_acc~6;getCurrentFloorID_~retValue_acc~6 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~6; 3157615#L844-9 stopRequestedAtCurrentFloor_#t~ret46 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~19 := stopRequestedAtCurrentFloor_#t~ret46;havoc stopRequestedAtCurrentFloor_#t~ret46;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~19;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~8;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~8; 3157610#L861-58 assume !(0 == buttonForFloorIsPressed_~floorID); 3157608#L865-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~8 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~8; 3157601#L882-58 stopRequestedAtCurrentFloor_#t~ret47 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~7 := stopRequestedAtCurrentFloor_#t~ret47;havoc stopRequestedAtCurrentFloor_#t~ret47;stopRequestedAtCurrentFloor_~retValue_acc~17 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~7 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~17; 3157595#L1536-4 timeShift_#t~ret61 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret61;havoc timeShift_#t~ret61; 3157593#L1675-4 assume !(0 != timeShift_~tmp___9~2); 3151020#L1766-12 assume !(1 == ~doorState~0); 3151018#L1766-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret39, stopRequestedInDirection_#t~ret40, stopRequestedInDirection_#t~ret41, stopRequestedInDirection_#t~ret42, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~14, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~16, stopRequestedInDirection_~__cil_tmp8~0, stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~14;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~16;havoc stopRequestedInDirection_~__cil_tmp8~0;havoc stopRequestedInDirection_~__cil_tmp9~0;stopRequestedInDirection_~__cil_tmp8~0 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~0 := (if stopRequestedInDirection_~__cil_tmp8~0 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~0 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~0 / 3 else stopRequestedInDirection_~__cil_tmp8~0 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~0 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~15;havoc isAnyLiftButtonPressed_~retValue_acc~15; 3150909#L1428-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~15 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~15; 3150905#L1449-8 stopRequestedInDirection_#t~ret39 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~16 := stopRequestedInDirection_#t~ret39;havoc stopRequestedInDirection_#t~ret39;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~16; 3150903#L1401-8 assume 0 != stopRequestedInDirection_~overload~0; 3150850#L1402-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__weight_#in~dir, stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls, stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_#res;havoc stopRequestedInDirection__wrappee__weight_#t~ret28, stopRequestedInDirection__wrappee__weight_#t~ret29, stopRequestedInDirection__wrappee__weight_#t~ret30, stopRequestedInDirection__wrappee__weight_#t~ret31, stopRequestedInDirection__wrappee__weight_#t~ret32, stopRequestedInDirection__wrappee__weight_#t~ret33, stopRequestedInDirection__wrappee__weight_#t~ret34, stopRequestedInDirection__wrappee__weight_#t~ret35, stopRequestedInDirection__wrappee__weight_#t~ret36, stopRequestedInDirection__wrappee__weight_#t~ret37, stopRequestedInDirection__wrappee__weight_#t~ret38, stopRequestedInDirection__wrappee__weight_~dir, stopRequestedInDirection__wrappee__weight_~respectFloorCalls, stopRequestedInDirection__wrappee__weight_~respectInLiftCalls, stopRequestedInDirection__wrappee__weight_~retValue_acc~13, stopRequestedInDirection__wrappee__weight_~tmp~15, stopRequestedInDirection__wrappee__weight_~tmp___0~5, stopRequestedInDirection__wrappee__weight_~tmp___1~4, stopRequestedInDirection__wrappee__weight_~tmp___2~2, stopRequestedInDirection__wrappee__weight_~tmp___3~1, stopRequestedInDirection__wrappee__weight_~tmp___4~0, stopRequestedInDirection__wrappee__weight_~tmp___5~0, stopRequestedInDirection__wrappee__weight_~tmp___6~0, stopRequestedInDirection__wrappee__weight_~tmp___7~0, stopRequestedInDirection__wrappee__weight_~tmp___8~0, stopRequestedInDirection__wrappee__weight_~tmp___9~0;stopRequestedInDirection__wrappee__weight_~dir := stopRequestedInDirection__wrappee__weight_#in~dir;stopRequestedInDirection__wrappee__weight_~respectFloorCalls := stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls;stopRequestedInDirection__wrappee__weight_~respectInLiftCalls := stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__weight_~retValue_acc~13;havoc stopRequestedInDirection__wrappee__weight_~tmp~15;havoc stopRequestedInDirection__wrappee__weight_~tmp___0~5;havoc stopRequestedInDirection__wrappee__weight_~tmp___1~4;havoc stopRequestedInDirection__wrappee__weight_~tmp___2~2;havoc stopRequestedInDirection__wrappee__weight_~tmp___3~1;havoc stopRequestedInDirection__wrappee__weight_~tmp___4~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___5~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___6~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___7~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___8~0;havoc stopRequestedInDirection__wrappee__weight_~tmp___9~0; 3150844#L1048-24 assume !(1 == stopRequestedInDirection__wrappee__weight_~dir); 3102983#L1217-24 assume !(0 == ~currentFloorID~0); 3102946#L1223-24 assume ~currentFloorID~0 > 0; 3102947#L1224-24 assume !(0 != stopRequestedInDirection__wrappee__weight_~respectFloorCalls); 3150845#L1238-24 assume ~currentFloorID~0 > 0; 3100320#L1240-24 assume 0 != stopRequestedInDirection__wrappee__weight_~respectInLiftCalls; 3100322#L1241-24 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__weight_~retValue_acc~13 := 1;stopRequestedInDirection__wrappee__weight_#res := stopRequestedInDirection__wrappee__weight_~retValue_acc~13; 3148582#L1370-24 stopRequestedInDirection_#t~ret40 := stopRequestedInDirection__wrappee__weight_#res;stopRequestedInDirection_~retValue_acc~14 := stopRequestedInDirection_#t~ret40;havoc stopRequestedInDirection_#t~ret40;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~14; 3148575#L1419-8 timeShift_#t~ret68 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret68;havoc timeShift_#t~ret68; 3148571#L1774-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret43, continueInDirection_~dir, continueInDirection_~tmp~17;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~17;~currentHeading~0 := continueInDirection_~dir; 3093118#L1463-12 assume !(1 == ~currentHeading~0); 3093119#L1473-36 assume !(0 == ~currentFloorID~0); 3150181#L1473-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3150180#L1479-29 havoc __utac_acc__Specification3_spec__2_#t~ret131, __utac_acc__Specification3_spec__2_#t~ret132, __utac_acc__Specification3_spec__2_~tmp~24, __utac_acc__Specification3_spec__2_~tmp___0~12;havoc __utac_acc__Specification3_spec__2_~tmp~24;havoc __utac_acc__Specification3_spec__2_~tmp___0~12; 3150101#L2963-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~9;havoc getCurrentHeading_~retValue_acc~9;getCurrentHeading_~retValue_acc~9 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~9; 3150102#L896-13 __utac_acc__Specification3_spec__2_#t~ret131 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~12 := __utac_acc__Specification3_spec__2_#t~ret131;havoc __utac_acc__Specification3_spec__2_#t~ret131; 3156852#L2967-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~12); 3156851#L2975-4 assume !(1 == ~expectedDirection~0); 3156847#L2976-4 cleanup_~i~0 := 1 + cleanup_~i~0; 3156845#L188-2 [2019-12-07 15:35:12,978 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:35:12,979 INFO L82 PathProgramCache]: Analyzing trace with hash 416862982, now seen corresponding path program 1 times [2019-12-07 15:35:12,979 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:35:12,979 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1646424578] [2019-12-07 15:35:12,979 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:35:12,992 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:35:13,029 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:35:13,029 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1646424578] [2019-12-07 15:35:13,029 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:35:13,030 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:35:13,030 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [862396558] [2019-12-07 15:35:13,030 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:35:13,030 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:35:13,030 INFO L82 PathProgramCache]: Analyzing trace with hash 354402529, now seen corresponding path program 1 times [2019-12-07 15:35:13,030 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:35:13,030 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1682315972] [2019-12-07 15:35:13,030 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:35:13,039 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 15:35:13,235 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 15:35:13,267 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 15:35:13,869 WARN L192 SmtUtils]: Spent 596.00 ms on a formula simplification. DAG size of input: 232 DAG size of output: 203 [2019-12-07 15:35:15,919 WARN L192 SmtUtils]: Spent 2.00 s on a formula simplification. DAG size of input: 222 DAG size of output: 178 [2019-12-07 15:35:15,928 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 15:35:15,928 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 15:35:15,928 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 15:35:15,928 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 15:35:15,928 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 15:35:15,928 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:15,928 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 15:35:15,929 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 15:35:15,929 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product21.cil.c_Iteration15_Loop [2019-12-07 15:35:15,929 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 15:35:15,929 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 15:35:15,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,967 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,975 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,976 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,978 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,979 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,982 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,986 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,987 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,989 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,990 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,993 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,995 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,996 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,997 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,998 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:15,999 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,000 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,001 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,005 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,006 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,007 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,008 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,009 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,010 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,012 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,013 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,014 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,019 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,021 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,025 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,035 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,097 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,112 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,116 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,118 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,119 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,120 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,131 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,132 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,137 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,151 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,156 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,164 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,168 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,191 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,203 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,206 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,207 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,210 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,213 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:16,989 WARN L192 SmtUtils]: Spent 362.00 ms on a formula simplification. DAG size of input: 60 DAG size of output: 47 [2019-12-07 15:35:17,407 WARN L192 SmtUtils]: Spent 234.00 ms on a formula simplification that was a NOOP. DAG size: 42 [2019-12-07 15:35:17,482 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 15:35:17,483 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,487 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,487 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,493 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,493 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret31=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret31=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,501 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,501 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,504 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,504 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___3~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,509 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,509 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,513 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,513 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___9~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,517 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,517 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,521 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,521 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls=0, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectFloorCalls=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectFloorCalls=0, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectFloorCalls=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,702 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,702 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,708 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,708 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret63=0} Honda state: {ULTIMATE.start_timeShift_#t~ret63=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,712 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,713 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,715 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,716 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret29=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret29=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,720 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,720 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,724 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,724 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=-8} Honda state: {~doorState~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,728 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,728 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,731 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,731 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret48=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,737 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,737 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,739 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,739 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___8~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___8~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,744 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,744 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,748 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,748 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11=1, ULTIMATE.start_isIdle_~tmp~14=1} Honda state: {ULTIMATE.start_anyStopRequested_#res=1, ULTIMATE.start_anyStopRequested_~retValue_acc~11=1, ULTIMATE.start_isIdle_~tmp~14=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,752 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,753 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,757 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,757 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_~tmp___0~0=0, ULTIMATE.start_isBlocked_~retValue_acc~5=0, ULTIMATE.start_isBlocked_#res=0} Honda state: {ULTIMATE.start_cleanup_~tmp___0~0=0, ULTIMATE.start_isBlocked_~retValue_acc~5=0, ULTIMATE.start_isBlocked_#res=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,762 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,762 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,764 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,764 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~17=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~17=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,768 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,768 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,771 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,771 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,775 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,775 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,778 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,778 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret22=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret22=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,782 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,782 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,784 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,784 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret26=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret26=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,788 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,789 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,791 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,791 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret123=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,795 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,795 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,798 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,798 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,802 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,802 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,805 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,805 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret32=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret32=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,808 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,809 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,811 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,811 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_#t~ret43=0} Honda state: {ULTIMATE.start_continueInDirection_#t~ret43=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,815 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,815 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,817 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,817 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___3~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___3~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,821 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,821 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,823 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,823 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret131=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_#t~ret131=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,826 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,826 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,829 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,829 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret42=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret42=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,834 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,834 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,837 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,837 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret62=0} Honda state: {ULTIMATE.start_timeShift_#t~ret62=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,840 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,840 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,844 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,845 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~floorButtons_0~0=4, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=4} Honda state: {~floorButtons_0~0=4, ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___9~3=4} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,848 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,848 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,851 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,851 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___9~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___9~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,855 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,855 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,857 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,857 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret28=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret28=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,861 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,861 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,863 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,863 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret46=0} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_#t~ret46=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,867 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,867 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,870 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,871 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret37=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret37=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,874 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,874 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,877 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,877 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,880 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,881 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,883 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,883 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___4~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,887 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,887 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,890 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,890 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~4=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___1~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,894 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,894 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,896 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,896 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret124=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret124=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,900 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,900 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,903 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,903 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,907 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,907 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,910 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,910 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~6=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___2~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,913 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,914 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,917 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,917 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0} Honda state: {ULTIMATE.start_isIdle_#res=0, ULTIMATE.start_cleanup_~tmp~6=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,920 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,921 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,923 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,923 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret33=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret33=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,927 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,927 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,930 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,930 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~11=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___0~11=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,933 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,934 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,936 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,936 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret65=0} Honda state: {ULTIMATE.start_timeShift_#t~ret65=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,939 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,939 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,942 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,942 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___1~8=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:17,945 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:17,945 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:17,948 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:17,948 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret128=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret128=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,126 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,126 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,128 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,128 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret39=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret39=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,131 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,131 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,136 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,137 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_#res=7, ~calls_0~0=7, ULTIMATE.start_anyStopRequested_~tmp___3~0=7, ULTIMATE.start_isFloorCalling_~retValue_acc~20=7} Honda state: {ULTIMATE.start_isFloorCalling_#res=7, ~calls_0~0=7, ULTIMATE.start_anyStopRequested_~tmp___3~0=7, ULTIMATE.start_isFloorCalling_~retValue_acc~20=7} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,141 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,141 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,147 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,147 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ~floorButtons_1~0=-8, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~8=-8} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~7=-8, ULTIMATE.start_buttonForFloorIsPressed_#res=-8, ~floorButtons_1~0=-8, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~8=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,151 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,151 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,171 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,171 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp5~0=0, ~maximumWeight~0=-1, ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp4~1=-2, ~weight~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp9~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=-2} Honda state: {ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp5~0=0, ~maximumWeight~0=-1, ULTIMATE.start_stopRequestedAtCurrentFloor_~__cil_tmp4~1=-2, ~weight~0=1, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp9~0=0, ULTIMATE.start_stopRequestedInDirection_~__cil_tmp8~0=-2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,175 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,175 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,178 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,178 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_#t~ret23=0} Honda state: {ULTIMATE.start_anyStopRequested_#t~ret23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,182 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,182 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,184 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,184 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp~13=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp~13=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,187 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,188 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,190 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,190 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret70=0} Honda state: {ULTIMATE.start_timeShift_#t~ret70=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,194 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,194 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,196 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,196 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret121=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 50 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,199 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,199 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,202 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,202 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret34=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret34=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 51 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,205 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,205 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,208 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,208 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret64=0} Honda state: {ULTIMATE.start_timeShift_#t~ret64=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 52 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,211 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,211 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,214 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,214 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp~15=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp~15=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 53 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,218 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,218 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,220 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,220 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___0~9=0} Honda state: {ULTIMATE.start_timeShift_~tmp___0~9=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 54 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,224 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,224 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,227 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,227 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Honda state: {ULTIMATE.start_timeShift_~tmp___4~2=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 55 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,231 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,231 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,234 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,234 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_anyStopRequested_~tmp___0~4=0} Honda state: {ULTIMATE.start_anyStopRequested_~tmp___0~4=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 56 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,238 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,238 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,241 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,241 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_isFloorCalling_~floorID=0} Honda state: {ULTIMATE.start_isFloorCalling_~floorID=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 57 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,245 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,245 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,248 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,249 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret122=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret122=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 58 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,252 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,252 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,255 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,255 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret71=0} Honda state: {ULTIMATE.start_timeShift_#t~ret71=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 59 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,259 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,259 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,262 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,262 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~overload~0=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~overload~0=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 60 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,266 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,266 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,269 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,269 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret38=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret38=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 61 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,273 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,273 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,276 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,276 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 62 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,280 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,280 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,282 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,282 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~24=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__2_~tmp~24=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 63 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,286 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,286 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,289 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,289 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret35=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#t~ret35=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 64 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,293 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,293 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,299 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,299 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Honda state: {ULTIMATE.start_stopRequestedInDirection_~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_#in~respectInLiftCalls=1, ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~respectInLiftCalls=1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 65 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,303 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,303 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,306 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 15:35:18,306 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___4~0=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__weight_~tmp___4~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 66 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,310 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 15:35:18,310 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 67 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,317 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 15:35:18,317 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 15:35:18,911 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 15:35:18,912 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 15:35:18,912 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 15:35:18,912 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 15:35:18,912 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 15:35:18,912 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 15:35:18,912 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:18,912 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 15:35:18,912 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 15:35:18,912 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product21.cil.c_Iteration15_Loop [2019-12-07 15:35:18,912 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 15:35:18,913 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 15:35:18,923 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,927 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,928 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,929 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,931 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,932 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,934 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,935 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,940 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,941 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,942 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,943 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,944 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,945 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,946 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,947 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,948 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,949 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,951 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,955 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,956 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,957 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,958 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,959 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,960 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,961 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,962 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,963 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,964 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,965 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,968 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,969 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,970 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,971 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,972 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,973 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:18,974 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,036 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,038 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,042 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,043 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,045 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,047 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,048 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,062 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,065 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,066 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,072 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,081 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,082 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,083 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,084 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,086 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,088 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,101 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,108 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,109 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,127 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,129 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,133 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,146 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,148 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,169 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,170 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,172 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,173 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,182 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,184 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,185 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,187 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,189 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,190 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,198 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,207 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,208 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,211 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,212 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 15:35:19,829 WARN L192 SmtUtils]: Spent 214.00 ms on a formula simplification. DAG size of input: 61 DAG size of output: 48 [2019-12-07 15:35:20,108 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 15:35:20,112 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 68 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,115 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,117 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,117 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,118 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,118 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,118 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,119 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,119 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,121 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 69 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,125 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,126 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,126 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,126 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,126 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,126 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,127 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,127 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,128 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 70 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,131 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,132 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,132 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,132 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,133 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,133 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,133 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,133 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,134 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 71 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,138 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,139 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,139 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,139 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,139 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,139 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,139 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,139 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,141 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 72 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,144 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,145 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,145 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,145 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,145 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,146 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,146 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,146 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,147 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 73 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,150 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,151 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,151 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,152 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,152 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 15:35:20,152 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,152 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 15:35:20,152 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,154 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 74 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,157 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,158 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,158 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,159 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,159 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,159 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,159 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,159 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,160 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 75 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,164 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,165 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,165 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,165 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,165 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,165 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,166 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,166 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,168 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 76 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,173 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,174 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,174 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,174 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,174 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,174 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,175 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,175 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,176 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 77 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,179 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,181 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,181 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,181 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,181 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,181 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,181 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,181 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,183 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 78 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,186 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,187 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,187 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,187 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,187 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,187 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,188 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,188 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,189 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 79 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,192 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,193 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,194 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,194 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,194 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,194 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,194 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,194 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,195 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 80 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,374 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,375 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,375 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,375 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,375 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,375 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,376 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,376 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,377 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 81 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,380 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,381 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,381 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,381 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,381 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,381 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,382 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,382 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,383 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 82 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,386 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,387 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,387 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,387 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,387 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,388 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,388 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,388 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,390 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 83 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,393 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,394 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,394 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,394 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,394 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,395 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,395 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,395 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,396 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 84 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,399 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,401 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,401 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,401 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,401 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,401 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,401 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,401 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,402 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 85 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,406 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,407 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,407 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,407 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,407 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,407 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,408 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,408 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,409 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 86 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,413 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,414 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,414 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,414 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,414 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 15:35:20,414 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,415 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 15:35:20,415 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,417 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 87 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,421 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,422 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,422 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,422 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,422 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,422 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,422 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,422 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,423 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 88 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,426 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,427 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,427 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,427 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,427 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,428 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,428 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,428 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,430 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 89 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,433 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,434 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,434 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,434 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,434 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,434 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,434 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,434 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,436 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 90 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,439 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,441 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,441 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,441 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,441 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,441 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,442 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,442 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,443 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 91 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,446 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,447 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,447 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,447 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,447 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,447 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,448 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,448 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,449 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 92 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,454 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,455 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,455 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,455 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,455 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,455 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,456 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,456 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,458 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 93 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,462 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,463 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,463 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,463 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,463 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,463 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,463 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,463 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,465 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 94 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,469 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,470 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,470 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,470 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,470 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,470 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,471 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,471 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,472 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 95 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,475 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,477 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,477 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,477 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,477 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,477 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,478 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,478 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,479 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 96 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,482 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,483 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,483 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,483 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,483 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,483 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,483 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,483 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,484 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 97 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,487 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,488 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,489 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,489 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,489 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,489 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,489 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,489 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,490 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 98 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,494 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,495 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,495 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,495 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,495 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,495 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,495 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,496 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,497 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 99 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,500 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,502 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,502 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,502 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,502 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,502 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,502 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,502 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,503 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 100 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,507 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,508 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,508 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,508 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,508 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,508 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,509 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,509 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,510 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 101 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,514 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,515 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,515 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,515 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,515 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,515 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,515 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,515 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,516 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 102 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,519 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,520 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,520 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,521 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,521 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,521 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,521 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,521 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,522 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 103 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,525 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,526 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,526 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,527 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,527 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,527 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,527 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,527 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,528 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 104 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,531 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,533 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,533 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,533 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,533 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,533 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,533 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,533 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,534 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 105 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,537 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,538 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,539 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,539 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,539 INFO L204 nArgumentSynthesizer]: 3 loop disjuncts [2019-12-07 15:35:20,539 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,543 INFO L401 nArgumentSynthesizer]: We have 6 Motzkin's Theorem applications. [2019-12-07 15:35:20,543 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,550 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 106 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,554 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,555 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,555 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,555 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,555 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,555 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,555 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,555 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,556 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 107 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,559 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,560 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,560 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,560 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,560 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,561 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,561 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,561 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,562 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 108 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,565 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,566 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,566 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,566 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,566 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,566 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,567 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,567 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,568 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 109 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,571 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,572 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,572 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,572 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,572 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,572 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,573 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,573 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,574 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 110 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,577 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,578 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,578 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,578 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,578 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,578 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,578 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,579 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,580 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 111 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,583 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,585 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,585 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,585 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,585 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,585 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,585 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,586 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,587 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 112 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,590 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,591 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,591 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,591 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,591 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,592 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,592 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,592 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,593 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 113 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,596 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,598 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,598 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,598 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,598 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,598 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,598 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,598 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,599 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 114 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,603 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,604 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,604 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,604 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,604 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,604 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,604 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,605 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,606 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 115 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 115 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,609 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,610 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,610 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,610 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,610 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,610 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,611 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,611 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,612 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 116 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 116 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,616 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,617 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,618 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,618 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,618 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 15:35:20,618 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,619 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 15:35:20,619 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,622 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 117 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 117 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,625 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,626 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,626 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,626 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,626 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,626 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,627 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,627 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,628 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 118 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 118 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,631 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,632 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,632 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,632 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,632 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,632 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,633 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,633 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,634 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 119 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 119 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,640 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,641 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,641 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,641 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,641 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,641 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,642 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,642 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,643 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 120 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 120 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,646 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,647 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,647 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,647 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,647 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,647 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,647 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,647 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,649 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 121 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 121 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,653 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,654 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,654 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,654 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,654 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,654 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,654 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,654 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,656 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 122 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 122 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,659 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,660 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,660 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,660 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,660 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,660 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,661 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,661 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,662 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 123 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 123 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,666 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,667 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,667 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,667 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,667 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,668 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,668 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,668 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,670 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 124 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 124 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,673 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,675 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,675 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,675 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,675 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 15:35:20,675 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,676 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 15:35:20,676 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,679 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 125 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 125 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,683 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 15:35:20,685 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 15:35:20,685 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 15:35:20,685 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 15:35:20,685 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 15:35:20,685 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 15:35:20,686 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 15:35:20,686 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 15:35:20,688 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 15:35:20,692 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-12-07 15:35:20,692 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_374bc22e-283b-493c-bf37-ad6c539d8b1b/bin/uautomizer/z3 Starting monitored process 126 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 126 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:35:20,696 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 15:35:20,696 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 15:35:20,696 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 15:35:20,697 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2019-12-07 15:35:20,699 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 15:35:20,738 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:35:20,902 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:35:20,906 INFO L264 TraceCheckSpWp]: Trace formula consists of 1227 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 15:35:20,912 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 15:35:20,955 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:35:20,956 INFO L264 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 15:35:20,958 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 15:35:20,989 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:35:20,992 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2019-12-07 15:35:20,993 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 141385 states and 257540 transitions. cyclomatic complexity: 116158 Second operand 5 states. [2019-12-07 15:35:22,271 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 141385 states and 257540 transitions. cyclomatic complexity: 116158. Second operand 5 states. Result 177809 states and 323744 transitions. Complement of second has 8 states. [2019-12-07 15:35:22,272 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-12-07 15:35:22,272 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-12-07 15:35:22,281 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 14193 transitions. [2019-12-07 15:35:22,282 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14193 transitions. Stem has 182 letters. Loop has 52 letters. [2019-12-07 15:35:22,284 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 15:35:22,284 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14193 transitions. Stem has 234 letters. Loop has 52 letters. [2019-12-07 15:35:22,286 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 15:35:22,286 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 14193 transitions. Stem has 182 letters. Loop has 104 letters. [2019-12-07 15:35:22,287 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 15:35:22,288 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 177809 states and 323744 transitions. [2019-12-07 15:35:22,811 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 15:35:22,811 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 177809 states to 0 states and 0 transitions. [2019-12-07 15:35:22,811 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 15:35:22,811 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 15:35:22,812 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 15:35:22,812 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:35:22,812 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 15:35:22,812 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 15:35:22,812 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:35:22,812 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 15:35:22,812 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 15:35:22,812 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2019-12-07 15:35:22,812 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:35:22,812 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-12-07 15:35:22,812 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 15:35:22,812 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-12-07 15:35:22,812 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 15:35:22,812 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 15:35:22,813 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 15:35:22,813 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 15:35:22,813 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 15:35:22,813 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:35:22,813 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 15:35:22,813 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 15:35:22,813 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 15:35:22,813 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-12-07 15:35:22,813 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-12-07 15:35:22,813 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 15:35:22,813 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-12-07 15:35:22,817 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 07.12 03:35:22 BoogieIcfgContainer [2019-12-07 15:35:22,817 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-12-07 15:35:22,818 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 15:35:22,818 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 15:35:22,818 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 15:35:22,818 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:33:42" (3/4) ... [2019-12-07 15:35:22,820 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-12-07 15:35:22,820 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 15:35:22,821 INFO L168 Benchmark]: Toolchain (without parser) took 109374.57 ms. Allocated memory was 1.0 GB in the beginning and 7.2 GB in the end (delta: 6.2 GB). Free memory was 934.0 MB in the beginning and 4.1 GB in the end (delta: -3.2 GB). Peak memory consumption was 3.0 GB. Max. memory is 11.5 GB. [2019-12-07 15:35:22,821 INFO L168 Benchmark]: CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 954.2 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 15:35:22,821 INFO L168 Benchmark]: CACSL2BoogieTranslator took 482.65 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 92.8 MB). Free memory was 934.0 MB in the beginning and 1.0 GB in the end (delta: -112.6 MB). Peak memory consumption was 31.7 MB. Max. memory is 11.5 GB. [2019-12-07 15:35:22,822 INFO L168 Benchmark]: Boogie Procedure Inliner took 208.79 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 950.5 MB in the end (delta: 96.1 MB). Peak memory consumption was 96.1 MB. Max. memory is 11.5 GB. [2019-12-07 15:35:22,822 INFO L168 Benchmark]: Boogie Preprocessor took 323.48 ms. Allocated memory is still 1.1 GB. Free memory was 950.5 MB in the beginning and 864.3 MB in the end (delta: 86.2 MB). Peak memory consumption was 86.2 MB. Max. memory is 11.5 GB. [2019-12-07 15:35:22,822 INFO L168 Benchmark]: RCFGBuilder took 7789.28 ms. Allocated memory was 1.1 GB in the beginning and 1.8 GB in the end (delta: 719.8 MB). Free memory was 864.3 MB in the beginning and 1.6 GB in the end (delta: -716.2 MB). Peak memory consumption was 533.6 MB. Max. memory is 11.5 GB. [2019-12-07 15:35:22,822 INFO L168 Benchmark]: BuchiAutomizer took 100565.08 ms. Allocated memory was 1.8 GB in the beginning and 7.2 GB in the end (delta: 5.4 GB). Free memory was 1.6 GB in the beginning and 4.1 GB in the end (delta: -2.5 GB). Peak memory consumption was 2.9 GB. Max. memory is 11.5 GB. [2019-12-07 15:35:22,822 INFO L168 Benchmark]: Witness Printer took 2.69 ms. Allocated memory is still 7.2 GB. Free memory is still 4.1 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 15:35:22,824 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.17 ms. Allocated memory is still 1.0 GB. Free memory is still 954.2 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 482.65 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 92.8 MB). Free memory was 934.0 MB in the beginning and 1.0 GB in the end (delta: -112.6 MB). Peak memory consumption was 31.7 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 208.79 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 950.5 MB in the end (delta: 96.1 MB). Peak memory consumption was 96.1 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 323.48 ms. Allocated memory is still 1.1 GB. Free memory was 950.5 MB in the beginning and 864.3 MB in the end (delta: 86.2 MB). Peak memory consumption was 86.2 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7789.28 ms. Allocated memory was 1.1 GB in the beginning and 1.8 GB in the end (delta: 719.8 MB). Free memory was 864.3 MB in the beginning and 1.6 GB in the end (delta: -716.2 MB). Peak memory consumption was 533.6 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 100565.08 ms. Allocated memory was 1.8 GB in the beginning and 7.2 GB in the end (delta: 5.4 GB). Free memory was 1.6 GB in the beginning and 4.1 GB in the end (delta: -2.5 GB). Peak memory consumption was 2.9 GB. Max. memory is 11.5 GB. * Witness Printer took 2.69 ms. Allocated memory is still 7.2 GB. Free memory is still 4.1 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 16 terminating modules (15 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 15 modules have a trivial ranking function, the largest among these consists of 8 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 100.5s and 16 iterations. TraceHistogramMax:1. Analysis of lassos took 9.2s. Construction of modules took 31.8s. Büchi inclusion checks took 19.5s. Highest rank in rank-based complementation 3. Minimization of det autom 16. Minimization of nondet autom 0. Automata minimization 15.1s AutomataMinimizationTime, 14 MinimizatonAttempts, 1310029 StatesRemovedByMinimization, 14 NontrivialMinimizations. Non-live state removal took 20.3s Buchi closure took 1.2s. Biggest automaton had 149281 states and ocurred in iteration 13. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 316142 SDtfs, 1055983 SDslu, 594268 SDs, 0 SdLazy, 49690 SolverSat, 9771 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 31.8s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI14 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital741 mio100 ax100 hnf100 lsp20 ukn42 mio100 lsp100 div252 bol100 ite100 ukn100 eq136 hnf61 smp94 dnf880 smp19 tf100 neg99 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 14ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 3 SupportingInvariants: 0 MotzkinApplications: 6 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 64 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 1.3s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...