./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash c6671d27cfc2bdc7710085525ce5a61867ea778d ................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................ Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 18:27:23,141 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 18:27:23,142 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 18:27:23,150 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 18:27:23,151 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 18:27:23,151 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 18:27:23,152 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 18:27:23,154 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 18:27:23,155 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 18:27:23,156 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 18:27:23,157 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 18:27:23,158 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 18:27:23,158 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 18:27:23,159 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 18:27:23,160 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 18:27:23,161 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 18:27:23,162 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 18:27:23,163 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 18:27:23,164 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 18:27:23,166 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 18:27:23,168 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 18:27:23,169 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 18:27:23,170 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 18:27:23,170 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 18:27:23,172 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 18:27:23,173 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 18:27:23,173 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 18:27:23,173 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 18:27:23,174 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 18:27:23,174 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 18:27:23,175 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 18:27:23,175 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 18:27:23,176 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 18:27:23,176 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 18:27:23,177 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 18:27:23,177 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 18:27:23,178 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 18:27:23,178 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 18:27:23,178 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 18:27:23,179 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 18:27:23,179 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 18:27:23,180 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-12-07 18:27:23,193 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 18:27:23,193 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 18:27:23,194 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-12-07 18:27:23,194 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-12-07 18:27:23,195 INFO L138 SettingsManager]: * Use SBE=true [2019-12-07 18:27:23,195 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-12-07 18:27:23,195 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-12-07 18:27:23,195 INFO L138 SettingsManager]: * Use old map elimination=false [2019-12-07 18:27:23,195 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-12-07 18:27:23,195 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-12-07 18:27:23,195 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-12-07 18:27:23,196 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 18:27:23,196 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 18:27:23,196 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-12-07 18:27:23,196 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 18:27:23,196 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 18:27:23,196 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 18:27:23,197 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-12-07 18:27:23,198 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 18:27:23,198 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 18:27:23,198 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-12-07 18:27:23,198 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 18:27:23,198 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-12-07 18:27:23,198 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 18:27:23,198 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-12-07 18:27:23,199 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-12-07 18:27:23,199 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> c6671d27cfc2bdc7710085525ce5a61867ea778d [2019-12-07 18:27:23,307 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 18:27:23,315 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 18:27:23,317 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 18:27:23,318 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 18:27:23,318 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 18:27:23,318 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c [2019-12-07 18:27:23,355 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/data/e3f656f32/8f8a371f057f40f3a51eaf445b81d8e2/FLAG44219e305 [2019-12-07 18:27:23,852 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 18:27:23,853 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/sv-benchmarks/c/product-lines/elevator_spec3_product25.cil.c [2019-12-07 18:27:23,866 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/data/e3f656f32/8f8a371f057f40f3a51eaf445b81d8e2/FLAG44219e305 [2019-12-07 18:27:23,875 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/data/e3f656f32/8f8a371f057f40f3a51eaf445b81d8e2 [2019-12-07 18:27:23,877 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 18:27:23,878 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 18:27:23,878 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 18:27:23,879 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 18:27:23,881 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 18:27:23,881 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 06:27:23" (1/1) ... [2019-12-07 18:27:23,883 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@11f83b0c and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:23, skipping insertion in model container [2019-12-07 18:27:23,883 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 06:27:23" (1/1) ... [2019-12-07 18:27:23,888 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 18:27:23,926 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 18:27:24,232 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 18:27:24,241 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 18:27:24,309 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 18:27:24,349 INFO L208 MainTranslator]: Completed translation [2019-12-07 18:27:24,349 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24 WrapperNode [2019-12-07 18:27:24,350 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 18:27:24,350 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 18:27:24,350 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 18:27:24,350 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 18:27:24,356 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,385 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,564 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 18:27:24,565 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 18:27:24,565 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 18:27:24,565 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 18:27:24,572 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,572 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,598 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,598 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,698 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,777 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,796 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... [2019-12-07 18:27:24,831 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 18:27:24,832 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 18:27:24,832 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 18:27:24,832 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 18:27:24,832 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:27:24,883 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 18:27:24,883 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-12-07 18:27:24,883 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 18:27:24,883 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 18:27:32,601 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 18:27:32,602 INFO L287 CfgBuilder]: Removed 1467 assume(true) statements. [2019-12-07 18:27:32,605 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 06:27:32 BoogieIcfgContainer [2019-12-07 18:27:32,605 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 18:27:32,605 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-12-07 18:27:32,605 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-12-07 18:27:32,607 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-12-07 18:27:32,608 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 18:27:32,608 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 07.12 06:27:23" (1/3) ... [2019-12-07 18:27:32,609 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1f77b115 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 06:27:32, skipping insertion in model container [2019-12-07 18:27:32,609 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 18:27:32,609 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 06:27:24" (2/3) ... [2019-12-07 18:27:32,609 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@1f77b115 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 06:27:32, skipping insertion in model container [2019-12-07 18:27:32,609 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 18:27:32,609 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 06:27:32" (3/3) ... [2019-12-07 18:27:32,610 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product25.cil.c [2019-12-07 18:27:32,638 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-12-07 18:27:32,638 INFO L357 BuchiCegarLoop]: Hoare is false [2019-12-07 18:27:32,638 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-12-07 18:27:32,638 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 18:27:32,638 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 18:27:32,638 INFO L361 BuchiCegarLoop]: Difference is false [2019-12-07 18:27:32,639 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 18:27:32,639 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-12-07 18:27:32,701 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6333 states. [2019-12-07 18:27:32,800 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1284 [2019-12-07 18:27:32,800 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:32,800 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:32,815 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:32,815 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:32,815 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-12-07 18:27:32,815 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 6333 states. [2019-12-07 18:27:32,858 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1284 [2019-12-07 18:27:32,858 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:32,858 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:32,861 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:32,861 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:32,868 INFO L794 eck$LassoCheckResult]: Stem: 1212#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 5753#L-1true havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 860#L1098true havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 707#L1106true main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1044#L1462true assume 0 != main_~tmp~11; 5544#L1438true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4171#L487true havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1131#L3282true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4067#L3307true bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 887#L765true assume 0 == initPersonOnFloor_~floor; 234#L766true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3591#L873-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5549#L557true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 866#L569-2true havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 12#L1832true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1442#L1884true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 302#L3076true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 374#L3077true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2108#L1849true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1185#L1870true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2027#L3081true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6246#L3182true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4816#L494true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3575#L521true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3033#L2445true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3684#L2457true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4414#L2596true assume !(0 != timeShift_~tmp___9~2); 807#L2687true assume !(1 == ~doorState~0); 738#L2687-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2621#L2036true assume !(1 == stopRequestedInDirection_~dir); 1953#L2205true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 75#L2358true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1050#L2695true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1461#L2412true assume !(1 == ~currentHeading~0); 4326#L2422true assume !(0 == ~currentFloorID~0); 4308#L2422-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4089#L2428-5true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5493#L3207true assume !(-1 == ~expectedDirection~0); 673#L3219true assume !(1 == ~expectedDirection~0); 705#L3220true havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 10#L1832-1true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1434#L1884-3true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 300#L3076-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 367#L3077-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2091#L1849-11true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1174#L1870-11true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2028#L3081-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6244#L3182-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4956#L494-21true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3526#L521-21true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3039#L2445-1true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3687#L2457-1true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4411#L2596-1true assume !(0 != timeShift_~tmp___9~2); 741#L2687-3true assume !(1 == ~doorState~0); 742#L2687-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2622#L2036-2true assume !(1 == stopRequestedInDirection_~dir); 1956#L2205-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 111#L2358-2true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1054#L2695-1true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1450#L2412-3true assume !(1 == ~currentHeading~0); 4295#L2422-9true assume !(0 == ~currentFloorID~0); 4297#L2422-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5052#L2428-11true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5502#L3207-1true assume !(-1 == ~expectedDirection~0); 672#L3219-1true assume !(1 == ~expectedDirection~0); 708#L3220-1true havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 15#L1832-2true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1437#L1884-6true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 303#L3076-2true assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4895#L3138-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2054#L1849-27true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1238#L1870-27true __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 4467#L3142-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 6251#L3182-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4885#L494-42true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3677#L521-42true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3036#L2445-2true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3685#L2457-2true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4415#L2596-2true assume !(0 != timeShift_~tmp___9~2); 735#L2687-6true assume 1 == ~doorState~0;~doorState~0 := 0; 736#L2687-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2633#L2036-4true assume !(1 == stopRequestedInDirection_~dir); 1933#L2205-4true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 112#L2358-4true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1056#L2695-2true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1454#L2412-6true assume !(1 == ~currentHeading~0); 4269#L2422-18true assume !(0 == ~currentFloorID~0); 4272#L2422-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5040#L2428-17true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5498#L3207-2true assume !(-1 == ~expectedDirection~0); 676#L3219-2true assume !(1 == ~expectedDirection~0); 704#L3220-2true havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1136#L3282-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4062#L3307-1true bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 888#L765-1true assume 0 == initPersonOnFloor_~floor; 235#L766-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3593#L873-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 5550#L557-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 861#L569-5true havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 21#L1832-3true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1426#L1884-9true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 305#L3076-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 369#L3077-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2046#L1849-33true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1232#L1870-33true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2022#L3081-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6254#L3182-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4736#L494-63true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3625#L521-63true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3044#L2445-3true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3688#L2457-3true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4417#L2596-3true assume !(0 != timeShift_~tmp___9~2); 737#L2687-9true assume !(1 == ~doorState~0); 733#L2687-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2606#L2036-6true assume !(1 == stopRequestedInDirection_~dir); 1938#L2205-6true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 118#L2358-6true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1040#L2695-3true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1444#L2412-9true assume !(1 == ~currentHeading~0); 4136#L2422-27true assume !(0 == ~currentFloorID~0); 4126#L2422-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5034#L2428-23true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5481#L3207-3true assume !(-1 == ~expectedDirection~0); 674#L3219-3true assume !(1 == ~expectedDirection~0); 714#L3220-3true cleanup_~i~0 := 0; 5532#L1268-2true [2019-12-07 18:27:32,869 INFO L796 eck$LassoCheckResult]: Loop: 5532#L1268-2true assume !false; 5511#L1269true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 5418#L1272true assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 659#L1659true cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 776#L1276true assume 1 != cleanup_~tmp___0~0; 777#L1276-1true havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4659#L494-84true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5896#L521-84true anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 5732#L1940true assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 156#L2004true isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 460#L2017true cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1017#L1288true assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 5#L1832-4true __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1433#L1884-12true __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 309#L3076-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 371#L3077-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1909#L1849-44true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1219#L1870-44true __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2025#L3081-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 6250#L3182-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4642#L494-89true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 5879#L521-89true stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3016#L2445-4true assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3691#L2457-4true timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4421#L2596-4true assume !(0 != timeShift_~tmp___9~2); 732#L2687-12true assume 1 == ~doorState~0;~doorState~0 := 0; 734#L2687-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2615#L2036-8true assume !(1 == stopRequestedInDirection_~dir); 1947#L2205-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 106#L2358-8true timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1038#L2695-4true assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1449#L2412-12true assume !(1 == ~currentHeading~0); 4120#L2422-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4124#L2422-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5022#L2428-29true havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 5483#L3207-4true assume !(-1 == ~expectedDirection~0); 675#L3219-4true assume !(1 == ~expectedDirection~0); 710#L3220-4true cleanup_~i~0 := 1 + cleanup_~i~0; 5532#L1268-2true [2019-12-07 18:27:32,874 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:32,874 INFO L82 PathProgramCache]: Analyzing trace with hash 1753801770, now seen corresponding path program 1 times [2019-12-07 18:27:32,880 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:32,880 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1178629862] [2019-12-07 18:27:32,881 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:33,010 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:33,140 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:33,141 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1178629862] [2019-12-07 18:27:33,141 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:33,142 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:33,142 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1218699096] [2019-12-07 18:27:33,145 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:33,146 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:33,146 INFO L82 PathProgramCache]: Analyzing trace with hash -1641855536, now seen corresponding path program 1 times [2019-12-07 18:27:33,146 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:33,146 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [945181592] [2019-12-07 18:27:33,146 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:33,155 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:33,200 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:33,200 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [945181592] [2019-12-07 18:27:33,200 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:33,200 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 18:27:33,200 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [659846713] [2019-12-07 18:27:33,201 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:33,202 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:33,212 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 18:27:33,212 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 18:27:33,213 INFO L87 Difference]: Start difference. First operand 6333 states. Second operand 6 states. [2019-12-07 18:27:38,206 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:27:38,206 INFO L93 Difference]: Finished difference Result 15945 states and 29782 transitions. [2019-12-07 18:27:38,206 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-12-07 18:27:38,208 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 15945 states and 29782 transitions. [2019-12-07 18:27:38,307 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3685 [2019-12-07 18:27:38,408 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 15945 states to 15875 states and 29701 transitions. [2019-12-07 18:27:38,409 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 15875 [2019-12-07 18:27:38,423 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 15875 [2019-12-07 18:27:38,423 INFO L73 IsDeterministic]: Start isDeterministic. Operand 15875 states and 29701 transitions. [2019-12-07 18:27:38,446 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:27:38,446 INFO L688 BuchiCegarLoop]: Abstraction has 15875 states and 29701 transitions. [2019-12-07 18:27:38,476 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 15875 states and 29701 transitions. [2019-12-07 18:27:38,649 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 15875 to 10593. [2019-12-07 18:27:38,650 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10593 states. [2019-12-07 18:27:38,662 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10593 states to 10593 states and 19828 transitions. [2019-12-07 18:27:38,663 INFO L711 BuchiCegarLoop]: Abstraction has 10593 states and 19828 transitions. [2019-12-07 18:27:38,663 INFO L591 BuchiCegarLoop]: Abstraction has 10593 states and 19828 transitions. [2019-12-07 18:27:38,664 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-12-07 18:27:38,664 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10593 states and 19828 transitions. [2019-12-07 18:27:38,686 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2373 [2019-12-07 18:27:38,686 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:38,686 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:38,689 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:38,689 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:38,690 INFO L794 eck$LassoCheckResult]: Stem: 24000#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 24001#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 23613#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 23418#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 23419#L1462 assume 0 != main_~tmp~11; 23773#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 27404#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 23867#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 23851#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23638#L765 assume 0 == initPersonOnFloor_~floor; 22711#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22341#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 26854#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23618#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22335#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22336#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22836#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 22837#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 23024#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 23947#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 23948#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 23990#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 27855#L494 assume !(0 == isFloorCalling_~floorID); 27831#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25748#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26117#L2445 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26118#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26953#L2596 assume !(0 != timeShift_~tmp___9~2); 23556#L2687 assume !(1 == ~doorState~0); 23462#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23463#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 25590#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 25425#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 22517#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 22518#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 23775#L2412 assume !(1 == ~currentHeading~0); 24425#L2422 assume !(0 == ~currentFloorID~0); 24360#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 27301#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27302#L3207 assume !(-1 == ~expectedDirection~0); 23342#L3219 assume !(1 == ~expectedDirection~0); 23343#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22330#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22331#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22830#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 22831#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23006#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 24697#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 23929#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 23930#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 28835#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28836#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25636#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26125#L2445-1 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26126#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26956#L2596-1 assume !(0 != timeShift_~tmp___9~2); 23466#L2687-3 assume !(1 == ~doorState~0); 23467#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23468#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 25591#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 32801#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 32800#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 24404#L2412-3 assume !(1 == ~currentHeading~0); 24405#L2422-9 assume !(0 == ~currentFloorID~0); 24331#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23373#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27976#L3207-1 assume !(-1 == ~expectedDirection~0); 23339#L3219-1 assume !(1 == ~expectedDirection~0); 23340#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22343#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22344#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22839#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 22840#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 26377#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 26378#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 27071#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 28810#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23981#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 27892#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25932#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26121#L2445-2 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26122#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26954#L2596-2 assume !(0 != timeShift_~tmp___9~2); 23458#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 23459#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23460#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 25605#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 22568#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 22569#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 23781#L2412-6 assume !(1 == ~currentHeading~0); 24413#L2422-18 assume !(0 == ~currentFloorID~0); 24292#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23358#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27973#L3207-2 assume !(-1 == ~expectedDirection~0); 23351#L3219-2 assume !(1 == ~expectedDirection~0); 23352#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 23415#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 23848#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 23640#L765-1 assume 0 == initPersonOnFloor_~floor; 22712#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 22355#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 26856#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 23614#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22360#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22361#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22845#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 22846#L3077-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 23010#L3087-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 24716#L1849-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 24040#L1870-34 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 24041#L3092-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 23950#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28841#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 25871#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26131#L2445-3 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26132#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26957#L2596-3 assume !(0 != timeShift_~tmp___9~2); 23461#L2687-9 assume !(1 == ~doorState~0); 23455#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23456#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 25575#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 32653#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 32651#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 32652#L2412-9 assume !(1 == ~currentHeading~0); 32872#L2422-27 assume !(0 == ~currentFloorID~0); 24290#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23361#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27969#L3207-3 assume !(-1 == ~expectedDirection~0); 23345#L3219-3 assume !(1 == ~expectedDirection~0); 23346#L3220-3 cleanup_~i~0 := 0; 23422#L1268-2 [2019-12-07 18:27:38,690 INFO L796 eck$LassoCheckResult]: Loop: 23422#L1268-2 assume !false; 28440#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 28376#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 23320#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 23321#L1276 assume 1 != cleanup_~tmp___0~0; 23508#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 23509#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26309#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 28635#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 22622#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 22623#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 23184#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 22316#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 22317#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 22857#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 22858#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 26535#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 26536#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 27148#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 28678#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 23954#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 28839#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 26283#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 26099#L2445-4 assume 0 != stopRequestedAtCurrentFloor_~tmp___0~6;stopRequestedAtCurrentFloor_~retValue_acc~20 := 1;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 26100#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 26960#L2596-4 assume !(0 != timeShift_~tmp___9~2); 23453#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 23454#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 23457#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 25583#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 22556#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 22557#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 23770#L2412-12 assume !(1 == ~currentHeading~0); 24402#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 24247#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 23356#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 27968#L3207-4 assume !(-1 == ~expectedDirection~0); 23348#L3219-4 assume !(1 == ~expectedDirection~0); 23350#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 23422#L1268-2 [2019-12-07 18:27:38,690 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:38,690 INFO L82 PathProgramCache]: Analyzing trace with hash -792771756, now seen corresponding path program 1 times [2019-12-07 18:27:38,690 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:38,691 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [116890175] [2019-12-07 18:27:38,691 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:38,714 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:38,773 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:38,773 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [116890175] [2019-12-07 18:27:38,774 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:38,774 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:38,774 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1980820199] [2019-12-07 18:27:38,774 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:38,775 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:38,775 INFO L82 PathProgramCache]: Analyzing trace with hash 2074388433, now seen corresponding path program 1 times [2019-12-07 18:27:38,775 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:38,775 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1509993293] [2019-12-07 18:27:38,775 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:38,781 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:38,804 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:38,804 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1509993293] [2019-12-07 18:27:38,805 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:38,805 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 18:27:38,805 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [457397674] [2019-12-07 18:27:38,805 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:38,805 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:38,806 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 18:27:38,806 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 18:27:38,806 INFO L87 Difference]: Start difference. First operand 10593 states and 19828 transitions. cyclomatic complexity: 9236 Second operand 6 states. [2019-12-07 18:27:39,079 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:27:39,079 INFO L93 Difference]: Finished difference Result 19159 states and 35934 transitions. [2019-12-07 18:27:39,079 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-12-07 18:27:39,080 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 19159 states and 35934 transitions. [2019-12-07 18:27:39,142 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4378 [2019-12-07 18:27:39,210 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 19159 states to 19159 states and 35934 transitions. [2019-12-07 18:27:39,210 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 19159 [2019-12-07 18:27:39,222 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 19159 [2019-12-07 18:27:39,222 INFO L73 IsDeterministic]: Start isDeterministic. Operand 19159 states and 35934 transitions. [2019-12-07 18:27:39,237 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:27:39,237 INFO L688 BuchiCegarLoop]: Abstraction has 19159 states and 35934 transitions. [2019-12-07 18:27:39,254 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 19159 states and 35934 transitions. [2019-12-07 18:27:39,399 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 19159 to 10611. [2019-12-07 18:27:39,399 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10611 states. [2019-12-07 18:27:39,415 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10611 states to 10611 states and 19846 transitions. [2019-12-07 18:27:39,415 INFO L711 BuchiCegarLoop]: Abstraction has 10611 states and 19846 transitions. [2019-12-07 18:27:39,415 INFO L591 BuchiCegarLoop]: Abstraction has 10611 states and 19846 transitions. [2019-12-07 18:27:39,415 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-12-07 18:27:39,416 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10611 states and 19846 transitions. [2019-12-07 18:27:39,442 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2377 [2019-12-07 18:27:39,442 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:39,442 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:39,445 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:39,445 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:39,446 INFO L794 eck$LassoCheckResult]: Stem: 53776#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 53777#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 53389#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 53196#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 53197#L1462 assume 0 != main_~tmp~11; 53554#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 57140#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 53648#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 53632#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 53416#L765 assume 0 == initPersonOnFloor_~floor; 52491#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 52123#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 56611#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 53394#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 52117#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 52118#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 52616#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 52617#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 52803#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 53728#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 53729#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 53766#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 57578#L494 assume !(0 == isFloorCalling_~floorID); 57557#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 55513#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 55884#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 54992#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 53708#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 53709#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 56917#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 59126#L2596 assume !(0 != timeShift_~tmp___9~2); 53332#L2687 assume !(1 == ~doorState~0); 53239#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 53240#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 55358#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 55190#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 52299#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 52300#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 53556#L2412 assume !(1 == ~currentHeading~0); 54193#L2422 assume !(0 == ~currentFloorID~0); 54130#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 57039#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57040#L3207 assume !(-1 == ~expectedDirection~0); 59104#L3219 assume !(1 == ~expectedDirection~0); 59102#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 59101#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 59090#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 59085#L3076-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 59078#L3077-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 59075#L3087-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59045#L1849-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59028#L1870-12 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 59021#L3092-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 59014#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 59009#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 59006#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 59001#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58989#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58983#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58981#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58980#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58978#L2596-1 assume !(0 != timeShift_~tmp___9~2); 58977#L2687-3 assume !(1 == ~doorState~0); 58904#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58902#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 58901#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58859#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58857#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58856#L2412-3 assume !(1 == ~currentHeading~0); 58855#L2422-9 assume !(0 == ~currentFloorID~0); 54101#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53152#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57684#L3207-1 assume !(-1 == ~expectedDirection~0); 53118#L3219-1 assume !(1 == ~expectedDirection~0); 53119#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 52125#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 52126#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 52619#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 52620#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 56147#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 56148#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 56816#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 58339#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 58769#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58767#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58763#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 58762#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58760#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58756#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58754#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58753#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58752#L2596-2 assume !(0 != timeShift_~tmp___9~2); 58747#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 58745#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58744#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 58700#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58688#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58685#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58686#L2412-6 assume !(1 == ~currentHeading~0); 58844#L2422-18 assume !(0 == ~currentFloorID~0); 54062#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53137#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57683#L3207-2 assume !(-1 == ~expectedDirection~0); 53130#L3219-2 assume !(1 == ~expectedDirection~0); 53131#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 53193#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 53629#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 53418#L765-1 assume 0 == initPersonOnFloor_~floor; 52492#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 52137#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 56613#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 53398#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 59168#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 59167#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 59165#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 59166#L3077-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 59164#L3087-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59159#L1849-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59154#L1870-34 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 59137#L3092-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 58807#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58800#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58796#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 58795#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58793#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58789#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58787#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58786#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58784#L2596-3 assume !(0 != timeShift_~tmp___9~2); 58783#L2687-9 assume !(1 == ~doorState~0); 58778#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58776#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 58578#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58555#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58552#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58550#L2412-9 assume !(1 == ~currentHeading~0); 58548#L2422-27 assume !(0 == ~currentFloorID~0); 54060#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53140#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57682#L3207-3 assume !(-1 == ~expectedDirection~0); 53124#L3219-3 assume !(1 == ~expectedDirection~0); 53125#L3220-3 cleanup_~i~0 := 0; 53200#L1268-2 [2019-12-07 18:27:39,446 INFO L796 eck$LassoCheckResult]: Loop: 53200#L1268-2 assume !false; 58137#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 58067#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 53099#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 53100#L1276 assume 1 != cleanup_~tmp___0~0; 53284#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 53285#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 56078#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 58334#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 52403#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 52404#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 52963#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 59194#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 59193#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 59191#L3076-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 59190#L3077-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0); 59189#L3087-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 1;buttonForFloorIsPressed_#in~floorID := 1;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 59188#L1849-45 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 59183#L1870-45 __utac_acc__Specification3_spec__1_#t~ret152 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___3~5 := __utac_acc__Specification3_spec__1_#t~ret152;havoc __utac_acc__Specification3_spec__1_#t~ret152; 59172#L3092-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___3~5;~expectedDirection~0 := 1; 58834#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 58833#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 58828#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 58826#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 58825#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 58819#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 58818#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 58817#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 58816#L2596-4 assume !(0 != timeShift_~tmp___9~2); 58814#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 58812#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 58809#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 58564#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 58554#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 58551#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 58549#L2412-12 assume !(1 == ~currentHeading~0); 58547#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 54017#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 53135#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 57681#L3207-4 assume !(-1 == ~expectedDirection~0); 53127#L3219-4 assume !(1 == ~expectedDirection~0); 53129#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 53200#L1268-2 [2019-12-07 18:27:39,447 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:39,447 INFO L82 PathProgramCache]: Analyzing trace with hash 2035875413, now seen corresponding path program 1 times [2019-12-07 18:27:39,447 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:39,447 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396783390] [2019-12-07 18:27:39,447 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:39,473 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:39,529 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:39,529 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396783390] [2019-12-07 18:27:39,529 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:39,529 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:39,529 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1494346500] [2019-12-07 18:27:39,530 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:39,530 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:39,530 INFO L82 PathProgramCache]: Analyzing trace with hash 1659710398, now seen corresponding path program 1 times [2019-12-07 18:27:39,530 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:39,531 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [94343488] [2019-12-07 18:27:39,531 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:39,536 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:39,553 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:39,553 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [94343488] [2019-12-07 18:27:39,554 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:39,554 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 18:27:39,554 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [747286047] [2019-12-07 18:27:39,554 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:39,554 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:39,554 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 18:27:39,555 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 18:27:39,555 INFO L87 Difference]: Start difference. First operand 10611 states and 19846 transitions. cyclomatic complexity: 9236 Second operand 5 states. [2019-12-07 18:27:40,494 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:27:40,495 INFO L93 Difference]: Finished difference Result 20678 states and 38600 transitions. [2019-12-07 18:27:40,495 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 18:27:40,495 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 20678 states and 38600 transitions. [2019-12-07 18:27:40,546 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4647 [2019-12-07 18:27:40,586 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 20678 states to 20678 states and 38600 transitions. [2019-12-07 18:27:40,586 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 20678 [2019-12-07 18:27:40,598 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 20678 [2019-12-07 18:27:40,598 INFO L73 IsDeterministic]: Start isDeterministic. Operand 20678 states and 38600 transitions. [2019-12-07 18:27:40,609 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:27:40,609 INFO L688 BuchiCegarLoop]: Abstraction has 20678 states and 38600 transitions. [2019-12-07 18:27:40,625 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 20678 states and 38600 transitions. [2019-12-07 18:27:40,718 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 20678 to 10611. [2019-12-07 18:27:40,718 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 10611 states. [2019-12-07 18:27:40,729 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 10611 states to 10611 states and 19790 transitions. [2019-12-07 18:27:40,729 INFO L711 BuchiCegarLoop]: Abstraction has 10611 states and 19790 transitions. [2019-12-07 18:27:40,729 INFO L591 BuchiCegarLoop]: Abstraction has 10611 states and 19790 transitions. [2019-12-07 18:27:40,729 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-12-07 18:27:40,729 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 10611 states and 19790 transitions. [2019-12-07 18:27:40,746 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 2377 [2019-12-07 18:27:40,746 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:40,746 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:40,748 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:40,749 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:40,749 INFO L794 eck$LassoCheckResult]: Stem: 85081#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 85082#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 84694#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 84502#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 84503#L1462 assume 0 != main_~tmp~11; 84858#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 88487#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 84952#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 84936#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 84721#L765 assume 0 == initPersonOnFloor_~floor; 83799#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 83430#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 87949#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 84699#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 83427#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 83428#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 83921#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 83922#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 84113#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 85032#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 85033#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 85071#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 88922#L494 assume !(0 == isFloorCalling_~floorID); 88897#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 86848#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 87219#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 86326#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 85012#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 85013#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 88257#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 91962#L2596 assume !(0 != timeShift_~tmp___9~2); 84637#L2687 assume !(1 == ~doorState~0); 84546#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 84547#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 86693#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 86526#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 83606#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 83607#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 84860#L2412 assume !(1 == ~currentHeading~0); 85509#L2422 assume !(0 == ~currentFloorID~0); 85439#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88381#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 88382#L3207 assume !(-1 == ~expectedDirection~0); 84428#L3219 assume !(1 == ~expectedDirection~0); 84429#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 83419#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 83420#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 83915#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83917#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 87488#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 87489#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 88152#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 89674#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 85058#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 88998#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 86736#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 87229#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 87231#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 91314#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 91313#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 91312#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 91311#L2596-1 assume !(0 != timeShift_~tmp___9~2); 91310#L2687-3 assume !(1 == ~doorState~0); 91307#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 91280#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 91273#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 91253#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 91249#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 91247#L2412-3 assume !(1 == ~currentHeading~0); 90499#L2422-9 assume !(0 == ~currentFloorID~0); 85410#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 84457#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 89021#L3207-1 assume !(-1 == ~expectedDirection~0); 84425#L3219-1 assume !(1 == ~expectedDirection~0); 84426#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 83432#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 83433#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 83924#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 83925#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 91456#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 91455#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 91453#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 91433#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 91431#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 91429#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 91425#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 91424#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 91422#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 91418#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 91412#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 91410#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 91409#L2596-2 assume !(0 != timeShift_~tmp___9~2); 91408#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 91407#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 91405#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 90152#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 90141#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 90139#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 90140#L2412-6 assume !(1 == ~currentHeading~0); 90494#L2422-18 assume !(0 == ~currentFloorID~0); 85371#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88432#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 90166#L3207-2 assume !(-1 == ~expectedDirection~0); 90163#L3219-2 assume !(1 == ~expectedDirection~0); 90161#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 90133#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 90128#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 90107#L765-1 assume 0 == initPersonOnFloor_~floor; 90090#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 90070#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 90067#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 90062#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 90060#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 90058#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 90056#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 90051#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 90049#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 90031#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 90029#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 89997#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 89994#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 89990#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 89985#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 89974#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 89972#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 89968#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 89966#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 89961#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 89958#L2596-3 assume !(0 != timeShift_~tmp___9~2); 89957#L2687-9 assume !(1 == ~doorState~0); 89956#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 89955#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 89919#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 89909#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 89905#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 89904#L2412-9 assume !(1 == ~currentHeading~0); 89902#L2422-27 assume !(0 == ~currentFloorID~0); 85369#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88418#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 89019#L3207-3 assume !(-1 == ~expectedDirection~0); 84431#L3219-3 assume !(1 == ~expectedDirection~0); 84432#L3220-3 cleanup_~i~0 := 0; 92351#L1268-2 [2019-12-07 18:27:40,749 INFO L796 eck$LassoCheckResult]: Loop: 92351#L1268-2 assume !false; 92350#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 92349#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 90471#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 90470#L1276 assume 1 != cleanup_~tmp___0~0; 90469#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 90463#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 90458#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 90433#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 90428#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 90426#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 90424#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 90419#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 90417#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 90415#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 90414#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 90413#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 90412#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 90411#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 90380#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 90377#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 90375#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 90370#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 90369#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 90368#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 90363#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 90362#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 90361#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 90356#L2596-4 assume !(0 != timeShift_~tmp___9~2); 90354#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 90353#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 90352#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 90043#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 90030#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 90028#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 89901#L2412-12 assume !(1 == ~currentHeading~0); 89883#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 85326#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 88414#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 89017#L3207-4 assume !(-1 == ~expectedDirection~0); 84434#L3219-4 assume !(1 == ~expectedDirection~0); 84436#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 92351#L1268-2 [2019-12-07 18:27:40,749 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:40,750 INFO L82 PathProgramCache]: Analyzing trace with hash -513296043, now seen corresponding path program 1 times [2019-12-07 18:27:40,750 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:40,750 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [646347722] [2019-12-07 18:27:40,750 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:40,764 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:40,799 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:40,800 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [646347722] [2019-12-07 18:27:40,800 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:40,800 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:40,800 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1895995246] [2019-12-07 18:27:40,801 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:40,801 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:40,801 INFO L82 PathProgramCache]: Analyzing trace with hash -399206906, now seen corresponding path program 1 times [2019-12-07 18:27:40,801 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:40,801 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1175137993] [2019-12-07 18:27:40,801 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:40,807 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:40,835 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:40,835 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1175137993] [2019-12-07 18:27:40,835 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:40,836 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 18:27:40,836 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [664271727] [2019-12-07 18:27:40,836 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:40,836 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:40,836 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 18:27:40,836 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 18:27:40,836 INFO L87 Difference]: Start difference. First operand 10611 states and 19790 transitions. cyclomatic complexity: 9180 Second operand 7 states. [2019-12-07 18:27:43,521 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:27:43,521 INFO L93 Difference]: Finished difference Result 66066 states and 123606 transitions. [2019-12-07 18:27:43,522 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 20 states. [2019-12-07 18:27:43,522 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 66066 states and 123606 transitions. [2019-12-07 18:27:43,698 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 23914 [2019-12-07 18:27:43,866 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 66066 states to 66066 states and 123606 transitions. [2019-12-07 18:27:43,866 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 66066 [2019-12-07 18:27:43,899 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 66066 [2019-12-07 18:27:43,899 INFO L73 IsDeterministic]: Start isDeterministic. Operand 66066 states and 123606 transitions. [2019-12-07 18:27:43,926 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:27:43,926 INFO L688 BuchiCegarLoop]: Abstraction has 66066 states and 123606 transitions. [2019-12-07 18:27:43,957 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 66066 states and 123606 transitions. [2019-12-07 18:27:44,181 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 66066 to 21183. [2019-12-07 18:27:44,181 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 21183 states. [2019-12-07 18:27:44,207 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 21183 states to 21183 states and 39497 transitions. [2019-12-07 18:27:44,208 INFO L711 BuchiCegarLoop]: Abstraction has 21183 states and 39497 transitions. [2019-12-07 18:27:44,208 INFO L591 BuchiCegarLoop]: Abstraction has 21183 states and 39497 transitions. [2019-12-07 18:27:44,208 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-12-07 18:27:44,208 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 21183 states and 39497 transitions. [2019-12-07 18:27:44,244 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 4764 [2019-12-07 18:27:44,245 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:44,245 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:44,247 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:44,247 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:44,248 INFO L794 eck$LassoCheckResult]: Stem: 161836#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 161837#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 161435#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 161238#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 161239#L1462 assume 0 != main_~tmp~11; 161600#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 165378#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 161703#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 161687#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 161463#L765 assume 0 == initPersonOnFloor_~floor; 160527#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 160159#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 164773#L557 assume !(0 == callOnFloor_~floorID); 166597#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 161441#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 167953#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 167952#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 167950#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 167948#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 167949#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 167978#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 167927#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 167921#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 167920#L494 assume !(0 == isFloorCalling_~floorID); 165857#L498 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 163637#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 164007#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 164009#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 167884#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 167883#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 167882#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 167881#L2596 assume !(0 != timeShift_~tmp___9~2); 167880#L2687 assume !(1 == ~doorState~0); 167879#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 167877#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 167876#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 163296#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 160335#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 160336#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 161603#L2412 assume !(1 == ~currentHeading~0); 162267#L2422 assume !(0 == ~currentFloorID~0); 162201#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 165472#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 168378#L3207 assume !(-1 == ~expectedDirection~0); 168375#L3219 assume !(1 == ~expectedDirection~0); 168373#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 168371#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 168369#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 168367#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 168366#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 168361#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 168360#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 168346#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 168340#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 168334#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 168333#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 163524#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 168332#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 163060#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 161741#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 161742#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 165136#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 170178#L2596-1 assume !(0 != timeShift_~tmp___9~2); 161287#L2687-3 assume !(1 == ~doorState~0); 161288#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 161289#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 163477#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 170082#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 161605#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 161607#L2412-3 assume !(1 == ~currentHeading~0); 162247#L2422-9 assume !(0 == ~currentFloorID~0); 162172#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 165464#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 170277#L3207-1 assume !(-1 == ~expectedDirection~0); 170272#L3219-1 assume !(1 == ~expectedDirection~0); 170268#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 170264#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 170261#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 170256#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 170252#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 170222#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 170217#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 170203#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 170188#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 167454#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 167452#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 167448#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 167447#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 167445#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 167441#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 167439#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 167438#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 167434#L2596-2 assume !(0 != timeShift_~tmp___9~2); 167433#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 167430#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 167426#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 167385#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 167374#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 167373#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 162254#L2412-6 assume !(1 == ~currentHeading~0); 162255#L2422-18 assume !(0 == ~currentFloorID~0); 170353#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 170346#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 170344#L3207-2 assume !(-1 == ~expectedDirection~0); 170341#L3219-2 assume !(1 == ~expectedDirection~0); 170339#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 170335#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 170332#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 170331#L765-1 assume 0 == initPersonOnFloor_~floor; 170316#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 170291#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 170290#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 161436#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 161437#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 174099#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 174098#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 174097#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 160825#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 162538#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 178107#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 174000#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 165837#L494-63 assume !(0 == isFloorCalling_~floorID); 165838#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 164817#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 164818#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 162913#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 162831#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 165139#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 165141#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 168281#L2596-3 assume !(0 != timeShift_~tmp___9~2); 161281#L2687-9 assume !(1 == ~doorState~0); 161282#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 179290#L2036-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 166978#L1068-15 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 166979#L2040-6 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 179158#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 179256#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 179257#L2412-9 assume !(1 == ~currentHeading~0); 179247#L2422-27 assume !(0 == ~currentFloorID~0); 179064#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 179059#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 179057#L3207-3 assume !(-1 == ~expectedDirection~0); 179054#L3219-3 assume !(1 == ~expectedDirection~0); 179052#L3220-3 cleanup_~i~0 := 0; 179050#L1268-2 [2019-12-07 18:27:44,248 INFO L796 eck$LassoCheckResult]: Loop: 179050#L1268-2 assume !false; 179049#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 179048#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 179047#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 179046#L1276 assume 1 != cleanup_~tmp___0~0; 161329#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 161330#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 178083#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 166803#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 160438#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 160439#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 160999#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 160134#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 160135#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 160668#L3076-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 160670#L3077-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 177026#L1849-44 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 177071#L1870-44 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 176941#L3081-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 162001#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 174081#L494-89 assume !(0 == isFloorCalling_~floorID); 174072#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 174071#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 174065#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 174067#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 174057#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 174058#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 174052#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 174053#L2596-4 assume !(0 != timeShift_~tmp___9~2); 176933#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 174046#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 174047#L2036-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 174016#L1068-20 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 174017#L2040-8 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 180216#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 180261#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 180260#L2412-12 assume !(1 == ~currentHeading~0); 165308#L2422-36 assume !(0 == ~currentFloorID~0); 162080#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 180188#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 180186#L3207-4 assume !(-1 == ~expectedDirection~0); 180183#L3219-4 assume !(1 == ~expectedDirection~0); 179051#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 179050#L1268-2 [2019-12-07 18:27:44,248 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:44,248 INFO L82 PathProgramCache]: Analyzing trace with hash 2050563140, now seen corresponding path program 1 times [2019-12-07 18:27:44,248 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:44,249 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1965039639] [2019-12-07 18:27:44,249 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:44,261 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:44,295 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:44,295 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1965039639] [2019-12-07 18:27:44,296 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:44,296 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:44,296 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [977696907] [2019-12-07 18:27:44,296 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:44,296 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:44,297 INFO L82 PathProgramCache]: Analyzing trace with hash 87600517, now seen corresponding path program 1 times [2019-12-07 18:27:44,297 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:44,297 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [178279492] [2019-12-07 18:27:44,297 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:44,302 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:44,333 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:44,333 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [178279492] [2019-12-07 18:27:44,333 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:44,334 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 18:27:44,334 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [399214559] [2019-12-07 18:27:44,334 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:44,334 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:44,334 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 18:27:44,334 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 18:27:44,334 INFO L87 Difference]: Start difference. First operand 21183 states and 39497 transitions. cyclomatic complexity: 18315 Second operand 6 states. [2019-12-07 18:27:50,342 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:27:50,342 INFO L93 Difference]: Finished difference Result 41427 states and 76863 transitions. [2019-12-07 18:27:50,343 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-12-07 18:27:50,343 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 41427 states and 76863 transitions. [2019-12-07 18:27:50,459 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9906 [2019-12-07 18:27:50,536 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 41427 states to 41427 states and 76863 transitions. [2019-12-07 18:27:50,536 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 41427 [2019-12-07 18:27:50,557 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 41427 [2019-12-07 18:27:50,557 INFO L73 IsDeterministic]: Start isDeterministic. Operand 41427 states and 76863 transitions. [2019-12-07 18:27:50,575 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:27:50,575 INFO L688 BuchiCegarLoop]: Abstraction has 41427 states and 76863 transitions. [2019-12-07 18:27:50,595 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 41427 states and 76863 transitions. [2019-12-07 18:27:50,779 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 41427 to 29031. [2019-12-07 18:27:50,779 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 29031 states. [2019-12-07 18:27:50,817 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 29031 states to 29031 states and 53925 transitions. [2019-12-07 18:27:50,817 INFO L711 BuchiCegarLoop]: Abstraction has 29031 states and 53925 transitions. [2019-12-07 18:27:50,817 INFO L591 BuchiCegarLoop]: Abstraction has 29031 states and 53925 transitions. [2019-12-07 18:27:50,817 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-12-07 18:27:50,817 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 29031 states and 53925 transitions. [2019-12-07 18:27:50,876 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6836 [2019-12-07 18:27:50,876 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:50,876 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:50,878 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:50,878 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:50,879 INFO L794 eck$LassoCheckResult]: Stem: 224470#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 224471#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 224071#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 223878#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 223879#L1462 assume 0 != main_~tmp~11; 224232#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 228067#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 224334#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 224316#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 224097#L765 assume 0 == initPersonOnFloor_~floor; 223169#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 222798#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 227464#L557 assume !(0 == callOnFloor_~floorID); 229297#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 224076#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 235271#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 235270#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 235269#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 223480#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 223482#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224418#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 224419#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 229812#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 229813#L494 assume !(0 == isFloorCalling_~floorID); 228578#L498 assume !(1 == isFloorCalling_~floorID); 228579#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 227436#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 227437#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 225755#L1849-10 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224398#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 224399#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 227833#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 229857#L2596 assume !(0 != timeShift_~tmp___9~2); 224014#L2687 assume !(1 == ~doorState~0); 223921#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 223922#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 226153#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 229815#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 222974#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 222975#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 224925#L2412 assume !(1 == ~currentHeading~0); 224926#L2422 assume !(0 == ~currentFloorID~0); 228176#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228162#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 236334#L3207 assume !(-1 == ~expectedDirection~0); 223800#L3219 assume !(1 == ~expectedDirection~0); 223801#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 222790#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 222791#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 236247#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 236248#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 236244#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 236231#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 236216#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 236210#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 236204#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 236195#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 236193#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 236189#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 236191#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 236194#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 236192#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 236187#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 236188#L2596-1 assume !(0 != timeShift_~tmp___9~2); 251611#L2687-3 assume !(1 == ~doorState~0); 251609#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 251599#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 251594#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 251575#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 251573#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 251574#L2412-3 assume !(1 == ~currentHeading~0); 251797#L2422-9 assume !(0 == ~currentFloorID~0); 224826#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228153#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 235337#L3207-1 assume !(-1 == ~expectedDirection~0); 235334#L3219-1 assume !(1 == ~expectedDirection~0); 235333#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 234190#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 234188#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 234182#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 234177#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 234174#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 234159#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 234151#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 234144#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 234141#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 234135#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 234130#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 234126#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 234128#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 234131#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 234129#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 234124#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 234125#L2596-2 assume !(0 != timeShift_~tmp___9~2); 251467#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 251460#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 251451#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 251440#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 251429#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 251427#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 251428#L2412-6 assume !(1 == ~currentHeading~0); 251770#L2422-18 assume !(0 == ~currentFloorID~0); 224777#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 228013#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 233273#L3207-2 assume !(-1 == ~expectedDirection~0); 233269#L3219-2 assume !(1 == ~expectedDirection~0); 232336#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 232331#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 232325#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 232324#L765-1 assume 0 == initPersonOnFloor_~floor; 232172#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 232151#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 232047#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 232043#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 232042#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 232041#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 232038#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 232035#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 232036#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 245614#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 244476#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 224421#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 228549#L494-63 assume !(0 == isFloorCalling_~floorID); 228550#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 227506#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 226699#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 225575#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224480#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 224481#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 251326#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 251325#L2596-3 assume !(0 != timeShift_~tmp___9~2); 251324#L2687-9 assume !(1 == ~doorState~0); 251323#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 251322#L2036-6 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 229711#L1068-15 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 225842#L2040-6 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 223034#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 223035#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 224230#L2412-9 assume !(1 == ~currentHeading~0); 224890#L2422-27 assume !(0 == ~currentFloorID~0); 224773#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230243#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 230240#L3207-3 assume !(-1 == ~expectedDirection~0); 230234#L3219-3 assume !(1 == ~expectedDirection~0); 230229#L3220-3 cleanup_~i~0 := 0; 230227#L1268-2 [2019-12-07 18:27:50,879 INFO L796 eck$LassoCheckResult]: Loop: 230227#L1268-2 assume !false; 230226#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 230225#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 230224#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 230223#L1276 assume 1 != cleanup_~tmp___0~0; 230222#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 230219#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 230220#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 236577#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 236465#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 244243#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 244242#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 244241#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 244240#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 244239#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 244238#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 244235#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 244231#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 243070#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 241944#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 228453#L494-89 assume !(0 == isFloorCalling_~floorID); 228454#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 226855#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 226667#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 225553#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 224466#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 224467#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 227837#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 250704#L2596-4 assume !(0 != timeShift_~tmp___9~2); 223911#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 223912#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 223915#L2036-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 226145#L1068-20 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 236273#L2040-8 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 230138#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 236262#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 236249#L2412-12 assume !(1 == ~currentHeading~0); 232191#L2422-36 assume !(0 == ~currentFloorID~0); 230244#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 230242#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 230237#L3207-4 assume !(-1 == ~expectedDirection~0); 230231#L3219-4 assume !(1 == ~expectedDirection~0); 230228#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 230227#L1268-2 [2019-12-07 18:27:50,879 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:50,879 INFO L82 PathProgramCache]: Analyzing trace with hash 1471965026, now seen corresponding path program 1 times [2019-12-07 18:27:50,880 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:50,880 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [752010162] [2019-12-07 18:27:50,880 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:50,893 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:50,922 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:50,923 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [752010162] [2019-12-07 18:27:50,923 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:50,923 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:50,923 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1814702005] [2019-12-07 18:27:50,923 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:50,923 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:50,924 INFO L82 PathProgramCache]: Analyzing trace with hash 1633177098, now seen corresponding path program 1 times [2019-12-07 18:27:50,924 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:50,924 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [467226680] [2019-12-07 18:27:50,924 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:50,927 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:50,941 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:50,941 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [467226680] [2019-12-07 18:27:50,942 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:50,942 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 18:27:50,942 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [15634338] [2019-12-07 18:27:50,942 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:50,942 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:50,942 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 18:27:50,942 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 18:27:50,943 INFO L87 Difference]: Start difference. First operand 29031 states and 53925 transitions. cyclomatic complexity: 24895 Second operand 5 states. [2019-12-07 18:27:58,037 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:27:58,037 INFO L93 Difference]: Finished difference Result 69175 states and 128889 transitions. [2019-12-07 18:27:58,037 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 18:27:58,037 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 69175 states and 128889 transitions. [2019-12-07 18:27:58,229 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 17728 [2019-12-07 18:27:58,371 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 69175 states to 69175 states and 128889 transitions. [2019-12-07 18:27:58,372 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 69175 [2019-12-07 18:27:58,412 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 69175 [2019-12-07 18:27:58,412 INFO L73 IsDeterministic]: Start isDeterministic. Operand 69175 states and 128889 transitions. [2019-12-07 18:27:58,443 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:27:58,443 INFO L688 BuchiCegarLoop]: Abstraction has 69175 states and 128889 transitions. [2019-12-07 18:27:58,478 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 69175 states and 128889 transitions. [2019-12-07 18:27:58,734 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 69175 to 28459. [2019-12-07 18:27:58,734 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 28459 states. [2019-12-07 18:27:58,771 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 28459 states to 28459 states and 52899 transitions. [2019-12-07 18:27:58,771 INFO L711 BuchiCegarLoop]: Abstraction has 28459 states and 52899 transitions. [2019-12-07 18:27:58,771 INFO L591 BuchiCegarLoop]: Abstraction has 28459 states and 52899 transitions. [2019-12-07 18:27:58,771 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-12-07 18:27:58,771 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 28459 states and 52899 transitions. [2019-12-07 18:27:58,829 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6693 [2019-12-07 18:27:58,830 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:27:58,830 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:27:58,832 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:58,832 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:27:58,832 INFO L794 eck$LassoCheckResult]: Stem: 322699#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 322700#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 322301#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 322104#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 322105#L1462 assume 0 != main_~tmp~11; 322469#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 326251#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 322571#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 322553#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 322329#L765 assume 0 == initPersonOnFloor_~floor; 321394#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 321026#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 325701#L557 assume !(0 == callOnFloor_~floorID); 327319#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 322307#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 322309#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 323097#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 323098#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 321709#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 321711#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 328068#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 323932#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 322689#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 326721#L494 assume !(0 == isFloorCalling_~floorID); 326690#L498 assume !(1 == isFloorCalling_~floorID); 325425#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 324562#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 324931#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 324005#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 324006#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 327966#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 327965#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 327964#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 327963#L2596 assume !(0 != timeShift_~tmp___9~2); 327962#L2687 assume !(1 == ~doorState~0); 327961#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 327959#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 327958#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 324217#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 321202#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 321203#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 322472#L2412 assume !(1 == ~currentHeading~0); 323135#L2422 assume !(0 == ~currentFloorID~0); 323064#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 327867#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 327865#L3207 assume !(-1 == ~expectedDirection~0); 327862#L3219 assume !(1 == ~expectedDirection~0); 327860#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 327859#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 327858#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 327855#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 327851#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 327848#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 327839#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 327825#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 327819#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 327813#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 327812#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 327811#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 327809#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 327806#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 327807#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 335706#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 335705#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 335704#L2596-1 assume !(0 != timeShift_~tmp___9~2); 322153#L2687-3 assume !(1 == ~doorState~0); 322154#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 324398#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 324399#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 321251#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 321252#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 322475#L2412-3 assume !(1 == ~currentHeading~0); 348369#L2422-9 assume !(0 == ~currentFloorID~0); 323031#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 334084#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 334074#L3207-1 assume !(-1 == ~expectedDirection~0); 334075#L3219-1 assume !(1 == ~expectedDirection~0); 334068#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 334069#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 334063#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 334064#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 344016#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 334065#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 334061#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 334056#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 334023#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 333855#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 333854#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 333852#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 333851#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 333849#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 333844#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 333842#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 333841#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 333834#L2596-2 assume !(0 != timeShift_~tmp___9~2); 322144#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 322145#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 322146#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 324413#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 348197#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 348194#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 348195#L2412-6 assume !(1 == ~currentHeading~0); 348486#L2422-18 assume !(0 == ~currentFloorID~0); 322990#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 332304#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 332294#L3207-2 assume !(-1 == ~expectedDirection~0); 332293#L3219-2 assume !(1 == ~expectedDirection~0); 332285#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 332286#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 342111#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 342110#L765-1 assume 0 == initPersonOnFloor_~floor; 332261#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 332242#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 332236#L557-2 assume !(0 == callOnFloor_~floorID); 332238#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 332229#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 332230#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 332225#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 332226#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 342034#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 332224#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 332219#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 332215#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 332181#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 330888#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 330884#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 330579#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 330575#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 330576#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 330578#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 330577#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 330574#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 330571#L2596-3 assume !(0 != timeShift_~tmp___9~2); 322147#L2687-9 assume !(1 == ~doorState~0); 322148#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 324381#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 324382#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 348434#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 348432#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 348433#L2412-9 assume !(1 == ~currentHeading~0); 349453#L2422-27 assume !(0 == ~currentFloorID~0); 322988#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 328242#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 328234#L3207-3 assume !(-1 == ~expectedDirection~0); 328233#L3219-3 assume !(1 == ~expectedDirection~0); 328215#L3220-3 cleanup_~i~0 := 0; 328214#L1268-2 [2019-12-07 18:27:58,832 INFO L796 eck$LassoCheckResult]: Loop: 328214#L1268-2 assume !false; 328209#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 328210#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 328205#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 328206#L1276 assume 1 != cleanup_~tmp___0~0; 328199#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 328200#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 328179#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 328180#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 337479#L1944 assume 0 != ~floorButtons_0~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 328141#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 328142#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 328137#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 328138#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 328133#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 328134#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 343902#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 328127#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 328126#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 328124#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 328093#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 328090#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 328089#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 328088#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 328086#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 328083#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 328084#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 331426#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 331425#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 331418#L2596-4 assume !(0 != timeShift_~tmp___9~2); 322138#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 322139#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 324389#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 324390#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 348317#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 348315#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 348316#L2412-12 assume !(1 == ~currentHeading~0); 349452#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 322943#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 328243#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 328228#L3207-4 assume !(-1 == ~expectedDirection~0); 328227#L3219-4 assume !(1 == ~expectedDirection~0); 328213#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 328214#L1268-2 [2019-12-07 18:27:58,833 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:58,833 INFO L82 PathProgramCache]: Analyzing trace with hash -1141662208, now seen corresponding path program 1 times [2019-12-07 18:27:58,833 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:58,833 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [212421318] [2019-12-07 18:27:58,833 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:58,845 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:58,872 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:58,873 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [212421318] [2019-12-07 18:27:58,873 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:58,873 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:27:58,873 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [102814223] [2019-12-07 18:27:58,873 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:27:58,873 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:27:58,873 INFO L82 PathProgramCache]: Analyzing trace with hash 1268916975, now seen corresponding path program 1 times [2019-12-07 18:27:58,874 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:27:58,874 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [218499276] [2019-12-07 18:27:58,874 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:27:58,877 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:27:58,891 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:27:58,892 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [218499276] [2019-12-07 18:27:58,892 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:27:58,892 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 18:27:58,892 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [247532854] [2019-12-07 18:27:58,892 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:27:58,892 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:27:58,892 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 18:27:58,893 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 18:27:58,893 INFO L87 Difference]: Start difference. First operand 28459 states and 52899 transitions. cyclomatic complexity: 24441 Second operand 5 states. [2019-12-07 18:28:00,970 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:00,970 INFO L93 Difference]: Finished difference Result 140675 states and 263532 transitions. [2019-12-07 18:28:00,970 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 18:28:00,970 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 140675 states and 263532 transitions. [2019-12-07 18:28:01,390 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 35538 [2019-12-07 18:28:01,710 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 140675 states to 140675 states and 263532 transitions. [2019-12-07 18:28:01,710 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 140675 [2019-12-07 18:28:01,796 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 140675 [2019-12-07 18:28:01,796 INFO L73 IsDeterministic]: Start isDeterministic. Operand 140675 states and 263532 transitions. [2019-12-07 18:28:01,861 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:01,861 INFO L688 BuchiCegarLoop]: Abstraction has 140675 states and 263532 transitions. [2019-12-07 18:28:01,934 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 140675 states and 263532 transitions. [2019-12-07 18:28:02,410 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 140675 to 55587. [2019-12-07 18:28:02,410 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55587 states. [2019-12-07 18:28:02,484 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55587 states to 55587 states and 103371 transitions. [2019-12-07 18:28:02,484 INFO L711 BuchiCegarLoop]: Abstraction has 55587 states and 103371 transitions. [2019-12-07 18:28:02,484 INFO L591 BuchiCegarLoop]: Abstraction has 55587 states and 103371 transitions. [2019-12-07 18:28:02,484 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-12-07 18:28:02,484 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55587 states and 103371 transitions. [2019-12-07 18:28:02,594 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13132 [2019-12-07 18:28:02,595 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:02,595 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:02,597 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:02,597 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:02,597 INFO L794 eck$LassoCheckResult]: Stem: 491889#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 491890#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 491472#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 491267#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 491268#L1462 assume 0 != main_~tmp~11; 491634#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 495499#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 491744#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 491727#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 491497#L765 assume 0 == initPersonOnFloor_~floor; 490557#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 490182#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 494904#L557 assume !(0 == callOnFloor_~floorID); 496760#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 491477#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 490176#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 490177#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 490683#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 490684#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 490872#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 491836#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 491837#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 491879#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 496054#L494 assume !(0 == isFloorCalling_~floorID); 496015#L498 assume !(1 == isFloorCalling_~floorID); 494618#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 493748#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 494120#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 493189#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 492715#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 491816#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 491817#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 495256#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 497371#L2596 assume !(0 != timeShift_~tmp___9~2); 491409#L2687 assume !(1 == ~doorState~0); 491313#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 491314#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 493586#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 497318#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 498361#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 498358#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 498353#L2412 assume !(1 == ~currentHeading~0); 498347#L2422 assume !(0 == ~currentFloorID~0); 498342#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 498339#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 498337#L3207 assume !(-1 == ~expectedDirection~0); 498334#L3219 assume !(1 == ~expectedDirection~0); 498332#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 498331#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 498330#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 498327#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 498323#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 498314#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 498308#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 498293#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 498286#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 498280#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 498278#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 498277#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 498275#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 498268#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 498261#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 498262#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 498256#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 498257#L2596-1 assume !(0 != timeShift_~tmp___9~2); 498248#L2687-3 assume !(1 == ~doorState~0); 498249#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 498212#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 498213#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 498169#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 498170#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 498163#L2412-3 assume !(1 == ~currentHeading~0); 498164#L2422-9 assume !(0 == ~currentFloorID~0); 501872#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 501870#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 501867#L3207-1 assume !(-1 == ~expectedDirection~0); 501864#L3219-1 assume !(1 == ~expectedDirection~0); 501863#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 501862#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 501861#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 501859#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501858#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 498143#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 498140#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 498102#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 498071#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 498067#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 498064#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 498062#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 498056#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 498054#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 498047#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 498042#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 498037#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 498018#L2596-2 assume !(0 != timeShift_~tmp___9~2); 498017#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 498016#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 497995#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 497996#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 497960#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 497961#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 497955#L2412-6 assume !(1 == ~currentHeading~0); 497956#L2422-18 assume !(0 == ~currentFloorID~0); 501482#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 501479#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 501477#L3207-2 assume !(-1 == ~expectedDirection~0); 501474#L3219-2 assume !(1 == ~expectedDirection~0); 501472#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 501468#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 501465#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 501464#L765-1 assume 0 == initPersonOnFloor_~floor; 501449#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 501429#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 501427#L557-2 assume !(0 == callOnFloor_~floorID); 501426#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 501422#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 501421#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 501420#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 501418#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 501417#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 497808#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 497804#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 497630#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 497594#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 497590#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 497586#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 497584#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 497580#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 497578#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 497574#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 497572#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 497570#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 497565#L2596-3 assume !(0 != timeShift_~tmp___9~2); 497557#L2687-9 assume !(1 == ~doorState~0); 497545#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 497529#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 497530#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 497450#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 497451#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 499306#L2412-9 assume !(1 == ~currentHeading~0); 497632#L2422-27 assume !(0 == ~currentFloorID~0); 497633#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 528595#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 528592#L3207-3 assume !(-1 == ~expectedDirection~0); 528586#L3219-3 assume !(1 == ~expectedDirection~0); 528581#L3220-3 cleanup_~i~0 := 0; 528579#L1268-2 [2019-12-07 18:28:02,598 INFO L796 eck$LassoCheckResult]: Loop: 528579#L1268-2 assume !false; 528578#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 528577#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 528576#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 528573#L1276 assume 1 != cleanup_~tmp___0~0; 528571#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 528569#L494-84 assume !(0 == isFloorCalling_~floorID); 528565#L498-84 assume !(1 == isFloorCalling_~floorID); 528552#L502-84 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 528548#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 528539#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 528533#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 528531#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 528529#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 528526#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 528525#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 528524#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 528507#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 497814#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 497810#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 497806#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 497768#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 497764#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 497760#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 497756#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 497730#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 497728#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 497721#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 497722#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 497714#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 497715#L2596-4 assume !(0 != timeShift_~tmp___9~2); 497706#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 497707#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 497680#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 497681#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 497643#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 497644#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 499030#L2412-12 assume !(1 == ~currentHeading~0); 497636#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 497637#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 528594#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 528589#L3207-4 assume !(-1 == ~expectedDirection~0); 528583#L3219-4 assume !(1 == ~expectedDirection~0); 528580#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 528579#L1268-2 [2019-12-07 18:28:02,598 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:02,598 INFO L82 PathProgramCache]: Analyzing trace with hash -1141662208, now seen corresponding path program 2 times [2019-12-07 18:28:02,598 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:02,598 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [940224520] [2019-12-07 18:28:02,598 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:02,610 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:02,638 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:02,638 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [940224520] [2019-12-07 18:28:02,638 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:02,638 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:02,639 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [174909168] [2019-12-07 18:28:02,639 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:02,639 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:02,639 INFO L82 PathProgramCache]: Analyzing trace with hash -207691871, now seen corresponding path program 1 times [2019-12-07 18:28:02,639 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:02,639 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1482053178] [2019-12-07 18:28:02,639 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:02,642 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:02,647 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:02,647 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1482053178] [2019-12-07 18:28:02,648 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:02,648 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 18:28:02,648 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1103921861] [2019-12-07 18:28:02,648 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:02,648 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:02,648 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 18:28:02,648 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 18:28:02,648 INFO L87 Difference]: Start difference. First operand 55587 states and 103371 transitions. cyclomatic complexity: 47785 Second operand 3 states. [2019-12-07 18:28:03,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:03,556 INFO L93 Difference]: Finished difference Result 60139 states and 111615 transitions. [2019-12-07 18:28:03,556 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 18:28:03,556 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 60139 states and 111615 transitions. [2019-12-07 18:28:03,725 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13506 [2019-12-07 18:28:03,857 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 60139 states to 60139 states and 111615 transitions. [2019-12-07 18:28:03,857 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 60139 [2019-12-07 18:28:03,890 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 60139 [2019-12-07 18:28:03,891 INFO L73 IsDeterministic]: Start isDeterministic. Operand 60139 states and 111615 transitions. [2019-12-07 18:28:03,918 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:03,918 INFO L688 BuchiCegarLoop]: Abstraction has 60139 states and 111615 transitions. [2019-12-07 18:28:03,947 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 60139 states and 111615 transitions. [2019-12-07 18:28:04,246 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 60139 to 55051. [2019-12-07 18:28:04,246 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55051 states. [2019-12-07 18:28:04,318 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55051 states to 55051 states and 102363 transitions. [2019-12-07 18:28:04,318 INFO L711 BuchiCegarLoop]: Abstraction has 55051 states and 102363 transitions. [2019-12-07 18:28:04,318 INFO L591 BuchiCegarLoop]: Abstraction has 55051 states and 102363 transitions. [2019-12-07 18:28:04,318 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-12-07 18:28:04,318 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55051 states and 102363 transitions. [2019-12-07 18:28:04,428 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12836 [2019-12-07 18:28:04,428 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:04,428 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:04,431 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:04,431 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:04,431 INFO L794 eck$LassoCheckResult]: Stem: 607602#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 607603#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 607193#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 606985#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 606986#L1462 assume 0 != main_~tmp~11; 607354#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 610987#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 607468#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 607449#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 607219#L765 assume 0 == initPersonOnFloor_~floor; 606286#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 605916#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 610424#L557 assume !(0 == callOnFloor_~floorID); 612088#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 607198#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 657007#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 657006#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 657004#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 657005#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 657015#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 657038#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 656980#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 656974#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 656973#L494 assume !(0 == isFloorCalling_~floorID); 656972#L498 assume !(1 == isFloorCalling_~floorID); 656969#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 656968#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 656966#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 656967#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 647080#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 647076#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 647074#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 647073#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 647071#L2596 assume !(0 != timeShift_~tmp___9~2); 647070#L2687 assume !(1 == ~doorState~0); 647069#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 647067#L2036 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 647066#L1068 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 647065#L2040 assume 0 != stopRequestedInDirection_~tmp~19;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 606092#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 606093#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 607356#L2412 assume !(1 == ~currentHeading~0); 608038#L2422 assume !(0 == ~currentFloorID~0); 607973#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 611077#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 656198#L3207 assume !(-1 == ~expectedDirection~0); 656194#L3219 assume !(1 == ~expectedDirection~0); 656192#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 656191#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 656190#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 656189#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 611505#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 611507#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 660897#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 660895#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 660894#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 609131#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 654633#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 655579#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 655553#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 655554#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 655580#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 655555#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 655556#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 660929#L2596-1 assume !(0 != timeShift_~tmp___9~2); 660353#L2687-3 assume !(1 == ~doorState~0); 660352#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 660351#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 658878#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 658859#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 658856#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 658818#L2412-3 assume !(1 == ~currentHeading~0); 658809#L2422-9 assume !(0 == ~currentFloorID~0); 658803#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 658801#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 658798#L3207-1 assume !(-1 == ~expectedDirection~0); 658790#L3219-1 assume !(1 == ~expectedDirection~0); 658789#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 658788#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 658787#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 658786#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 643289#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 643285#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 643282#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 643276#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 643254#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 639281#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 639273#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 639271#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 639267#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 639262#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 639257#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 639249#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 639243#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 639210#L2596-2 assume !(0 != timeShift_~tmp___9~2); 639204#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 639199#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 639195#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 639196#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 638957#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 638954#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 638951#L2412-6 assume !(1 == ~currentHeading~0); 638946#L2422-18 assume !(0 == ~currentFloorID~0); 638945#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 638942#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 638940#L3207-2 assume !(-1 == ~expectedDirection~0); 638937#L3219-2 assume !(1 == ~expectedDirection~0); 638935#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 638751#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 638746#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 638703#L765-1 assume 0 == initPersonOnFloor_~floor; 633019#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 632999#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 632997#L557-2 assume !(0 == callOnFloor_~floorID); 632995#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 632991#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 632986#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 632984#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 632982#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 632983#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 632610#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 632606#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 632603#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 632577#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 632571#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 632568#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 632567#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 632566#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 632564#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 632559#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 632555#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 632553#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 632551#L2596-3 assume !(0 != timeShift_~tmp___9~2); 632550#L2687-9 assume !(1 == ~doorState~0); 632549#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 632547#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 632506#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 632496#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 632494#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 632492#L2412-9 assume !(1 == ~currentHeading~0); 632483#L2422-27 assume !(0 == ~currentFloorID~0); 613454#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 613451#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 613301#L3207-3 assume !(-1 == ~expectedDirection~0); 613298#L3219-3 assume !(1 == ~expectedDirection~0); 613296#L3220-3 cleanup_~i~0 := 0; 613294#L1268-2 [2019-12-07 18:28:04,431 INFO L796 eck$LassoCheckResult]: Loop: 613294#L1268-2 assume !false; 613293#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 613292#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 613291#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 613290#L1276 assume 1 != cleanup_~tmp___0~0; 613286#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 613266#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 613261#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 613246#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 613239#L1944 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 613220#L494-85 assume !(0 == isFloorCalling_~floorID); 613205#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 613203#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 613178#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 613169#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 613167#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 613164#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 613159#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 613156#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 613151#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 613146#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 612802#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 612785#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 612776#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 612768#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 612765#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 612763#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 612762#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 612761#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 612760#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 612754#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 612750#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 612747#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 612741#L2596-4 assume !(0 != timeShift_~tmp___9~2); 612736#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 612728#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 612716#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 612705#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 612689#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 612679#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 612671#L2412-12 assume !(1 == ~currentHeading~0); 612662#L2422-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 612651#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 612652#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 613305#L3207-4 assume !(-1 == ~expectedDirection~0); 613303#L3219-4 assume !(1 == ~expectedDirection~0); 613295#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 613294#L1268-2 [2019-12-07 18:28:04,431 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:04,432 INFO L82 PathProgramCache]: Analyzing trace with hash -1141662208, now seen corresponding path program 3 times [2019-12-07 18:28:04,432 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:04,432 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1522395423] [2019-12-07 18:28:04,432 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:04,445 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:04,474 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:04,474 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1522395423] [2019-12-07 18:28:04,474 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:04,475 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:04,475 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1721239124] [2019-12-07 18:28:04,475 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:04,475 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:04,475 INFO L82 PathProgramCache]: Analyzing trace with hash 1163237991, now seen corresponding path program 1 times [2019-12-07 18:28:04,475 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:04,475 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [378665506] [2019-12-07 18:28:04,475 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:04,479 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:04,489 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:04,489 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [378665506] [2019-12-07 18:28:04,489 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:04,489 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:04,489 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [265648403] [2019-12-07 18:28:04,490 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:04,490 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:04,490 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 18:28:04,490 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 18:28:04,490 INFO L87 Difference]: Start difference. First operand 55051 states and 102363 transitions. cyclomatic complexity: 47313 Second operand 4 states. [2019-12-07 18:28:05,031 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:05,031 INFO L93 Difference]: Finished difference Result 101957 states and 189935 transitions. [2019-12-07 18:28:05,031 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 18:28:05,032 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 101957 states and 189935 transitions. [2019-12-07 18:28:05,355 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 24618 [2019-12-07 18:28:05,601 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 101957 states to 101957 states and 189935 transitions. [2019-12-07 18:28:05,601 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 101957 [2019-12-07 18:28:05,666 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 101957 [2019-12-07 18:28:05,666 INFO L73 IsDeterministic]: Start isDeterministic. Operand 101957 states and 189935 transitions. [2019-12-07 18:28:05,714 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:05,714 INFO L688 BuchiCegarLoop]: Abstraction has 101957 states and 189935 transitions. [2019-12-07 18:28:05,766 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 101957 states and 189935 transitions. [2019-12-07 18:28:06,168 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 101957 to 55103. [2019-12-07 18:28:06,168 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 55103 states. [2019-12-07 18:28:06,240 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 55103 states to 55103 states and 102415 transitions. [2019-12-07 18:28:06,240 INFO L711 BuchiCegarLoop]: Abstraction has 55103 states and 102415 transitions. [2019-12-07 18:28:06,240 INFO L591 BuchiCegarLoop]: Abstraction has 55103 states and 102415 transitions. [2019-12-07 18:28:06,240 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-12-07 18:28:06,240 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 55103 states and 102415 transitions. [2019-12-07 18:28:06,428 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 12848 [2019-12-07 18:28:06,428 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:06,428 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:06,429 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:06,430 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:06,430 INFO L794 eck$LassoCheckResult]: Stem: 764660#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 764661#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 764232#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 764024#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 764025#L1462 assume 0 != main_~tmp~11; 764399#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 768161#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 764512#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 764493#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 764259#L765 assume 0 == initPersonOnFloor_~floor; 763315#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 762936#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 767580#L557 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 764239#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 762930#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 762931#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 763437#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 763438#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 763627#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 765538#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 765879#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 764649#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 768681#L494 assume !(0 == isFloorCalling_~floorID); 768682#L498 assume !(1 == isFloorCalling_~floorID); 767305#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 766501#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 766847#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 766849#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 765475#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 765476#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 767925#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 767926#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 769941#L2596 assume !(0 != timeShift_~tmp___9~2); 769943#L2687 assume !(1 == ~doorState~0); 764072#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 764073#L2036 assume !(1 == stopRequestedInDirection_~dir); 765824#L2205 assume !(0 == ~currentFloorID~0); 765825#L2211 assume !(~currentFloorID~0 > 0); 764556#L2226 assume ~currentFloorID~0 > 0; 764557#L2228 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764495#L2229 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 764496#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 770222#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 765101#L2412 assume !(1 == ~currentHeading~0); 765102#L2422 assume !(0 == ~currentFloorID~0); 768268#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768253#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 775362#L3207 assume !(-1 == ~expectedDirection~0); 775356#L3219 assume !(1 == ~expectedDirection~0); 773235#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 773234#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 773233#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 773231#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 773232#L3138-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 765918#L1849-16 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 764579#L1870-16 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 764580#L3142-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 798139#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 798138#L494-21 assume !(0 == isFloorCalling_~floorID); 798135#L498-21 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 798133#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 798125#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 798126#L1849-21 assume !(0 == buttonForFloorIsPressed_~floorID); 798130#L1853-21 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 798128#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 798127#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 798124#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 798121#L2596-1 assume !(0 != timeShift_~tmp___9~2); 770677#L2687-3 assume !(1 == ~doorState~0); 770678#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 771558#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 771557#L2205-2 assume !(0 == ~currentFloorID~0); 771556#L2211-2 assume !(~currentFloorID~0 > 0); 770307#L2226-2 assume ~currentFloorID~0 > 0; 771575#L2228-2 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764480#L2229-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 763237#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 770955#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 770957#L2412-3 assume !(1 == ~currentHeading~0); 768256#L2422-9 assume !(0 == ~currentFloorID~0); 764999#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 815307#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 815304#L3207-1 assume !(-1 == ~expectedDirection~0); 815301#L3219-1 assume !(1 == ~expectedDirection~0); 811791#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 811790#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 811709#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 781861#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 781862#L3138-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 801025#L1849-27 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 801020#L1870-27 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 801004#L3142-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 793622#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 800997#L494-42 assume !(0 == isFloorCalling_~floorID); 800995#L498-42 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 800990#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 800988#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 800989#L1849-32 assume !(0 == buttonForFloorIsPressed_~floorID); 781923#L1853-32 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 781872#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 781870#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 781868#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 770962#L2596-2 assume !(0 != timeShift_~tmp___9~2); 770964#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 777927#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 777925#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 777926#L2205-4 assume !(0 == ~currentFloorID~0); 777952#L2211-4 assume !(~currentFloorID~0 > 0); 764543#L2226-4 assume ~currentFloorID~0 > 0; 764545#L2228-4 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764485#L2229-4 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 764486#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 778428#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 765088#L2412-6 assume !(1 == ~currentHeading~0); 765089#L2422-18 assume !(0 == ~currentFloorID~0); 768238#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768108#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 817496#L3207-2 assume !(-1 == ~expectedDirection~0); 817493#L3219-2 assume !(1 == ~expectedDirection~0); 817491#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 817487#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 817484#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 817483#L765-1 assume 0 == initPersonOnFloor_~floor; 817409#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 817388#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 817382#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 816919#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 817378#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 817377#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 817375#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 817376#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 817506#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 817499#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 817353#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 817352#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 817351#L494-63 assume !(0 == isFloorCalling_~floorID); 817037#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 817029#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 817024#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 817025#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 817033#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 817028#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 817026#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 817027#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 818006#L2596-3 assume !(0 != timeShift_~tmp___9~2); 817916#L2687-9 assume !(1 == ~doorState~0); 764063#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 764064#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 766335#L2205-6 assume !(0 == ~currentFloorID~0); 817870#L2211-6 assume !(~currentFloorID~0 > 0); 770192#L2226-6 assume ~currentFloorID~0 > 0; 817867#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 764487#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 763215#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 815873#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 815874#L2412-9 assume !(1 == ~currentHeading~0); 782000#L2422-27 assume !(0 == ~currentFloorID~0); 782001#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 817838#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 769324#L3207-3 assume !(-1 == ~expectedDirection~0); 764186#L3219-3 assume !(1 == ~expectedDirection~0); 764036#L3220-3 cleanup_~i~0 := 0; 764029#L1268-2 [2019-12-07 18:28:06,430 INFO L796 eck$LassoCheckResult]: Loop: 764029#L1268-2 assume !false; 769337#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 769255#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 763923#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 763924#L1276 assume 1 != cleanup_~tmp___0~0; 764116#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 764117#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 768537#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 769566#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 769567#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 817070#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 817065#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 817063#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 817062#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 817061#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 784572#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 784573#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 816603#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 816595#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 816594#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 816593#L494-89 assume !(0 == isFloorCalling_~floorID); 816590#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 816588#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 816585#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 816586#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 817123#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 764656#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 764657#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 816587#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 816949#L2596-4 assume !(0 != timeShift_~tmp___9~2); 764061#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 764062#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 817709#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 817710#L2205-8 assume !(0 == ~currentFloorID~0); 817724#L2211-8 assume !(~currentFloorID~0 > 0); 764553#L2226-8 assume ~currentFloorID~0 > 0; 764555#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 770152#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 770151#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 815599#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 765076#L2412-12 assume !(1 == ~currentHeading~0); 765077#L2422-36 assume !(0 == ~currentFloorID~0); 768098#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 768085#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 768827#L3207-4 assume !(-1 == ~expectedDirection~0); 763951#L3219-4 assume !(1 == ~expectedDirection~0); 763953#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 764029#L1268-2 [2019-12-07 18:28:06,430 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:06,430 INFO L82 PathProgramCache]: Analyzing trace with hash 170153110, now seen corresponding path program 1 times [2019-12-07 18:28:06,431 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:06,431 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1049962541] [2019-12-07 18:28:06,431 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:06,440 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:06,473 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:06,473 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1049962541] [2019-12-07 18:28:06,473 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:06,473 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:06,473 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1254996779] [2019-12-07 18:28:06,474 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:06,474 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:06,474 INFO L82 PathProgramCache]: Analyzing trace with hash 53502033, now seen corresponding path program 1 times [2019-12-07 18:28:06,474 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:06,474 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [562760303] [2019-12-07 18:28:06,474 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:06,478 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:06,484 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:06,484 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [562760303] [2019-12-07 18:28:06,484 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:06,484 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 18:28:06,484 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [825369354] [2019-12-07 18:28:06,485 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:06,485 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:06,485 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 18:28:06,485 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 18:28:06,485 INFO L87 Difference]: Start difference. First operand 55103 states and 102415 transitions. cyclomatic complexity: 47313 Second operand 3 states. [2019-12-07 18:28:07,555 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:07,555 INFO L93 Difference]: Finished difference Result 103867 states and 192591 transitions. [2019-12-07 18:28:07,556 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 18:28:07,556 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 103867 states and 192591 transitions. [2019-12-07 18:28:07,895 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25004 [2019-12-07 18:28:08,164 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 103867 states to 103867 states and 192591 transitions. [2019-12-07 18:28:08,164 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 103867 [2019-12-07 18:28:08,226 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 103867 [2019-12-07 18:28:08,226 INFO L73 IsDeterministic]: Start isDeterministic. Operand 103867 states and 192591 transitions. [2019-12-07 18:28:08,269 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:08,269 INFO L688 BuchiCegarLoop]: Abstraction has 103867 states and 192591 transitions. [2019-12-07 18:28:08,318 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 103867 states and 192591 transitions. [2019-12-07 18:28:08,875 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 103867 to 103867. [2019-12-07 18:28:08,875 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 103867 states. [2019-12-07 18:28:09,013 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 103867 states to 103867 states and 192591 transitions. [2019-12-07 18:28:09,013 INFO L711 BuchiCegarLoop]: Abstraction has 103867 states and 192591 transitions. [2019-12-07 18:28:09,013 INFO L591 BuchiCegarLoop]: Abstraction has 103867 states and 192591 transitions. [2019-12-07 18:28:09,014 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-12-07 18:28:09,014 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 103867 states and 192591 transitions. [2019-12-07 18:28:09,225 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 25004 [2019-12-07 18:28:09,225 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:09,225 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:09,228 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:09,228 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:09,228 INFO L794 eck$LassoCheckResult]: Stem: 923622#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 923623#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 923197#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 922989#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 922990#L1462 assume 0 != main_~tmp~11; 923365#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 927049#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 923479#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 923462#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 923222#L765 assume 0 == initPersonOnFloor_~floor; 922289#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 921914#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 926490#L557 assume !(0 == callOnFloor_~floorID); 928124#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 923202#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 921908#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 921909#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 922409#L3076 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 922410#L3077 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 922599#L1849 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 936086#L1870 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 924842#L3081 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 923612#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 927525#L494 assume !(0 == isFloorCalling_~floorID); 927501#L498 assume !(1 == isFloorCalling_~floorID); 926239#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 925443#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 925789#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 924904#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 924436#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 923551#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 923552#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 926813#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 928653#L2596 assume !(0 != timeShift_~tmp___9~2); 923136#L2687 assume !(1 == ~doorState~0); 923032#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 923033#L2036 assume !(1 == stopRequestedInDirection_~dir); 925287#L2205 assume !(0 == ~currentFloorID~0); 935579#L2211 assume ~currentFloorID~0 > 0; 935479#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 935480#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 935485#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 935481#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 923127#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 941307#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 941305#L2412 assume !(1 == ~currentHeading~0); 941299#L2422 assume !(0 == ~currentFloorID~0); 941298#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 927144#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 941290#L3207 assume !(-1 == ~expectedDirection~0); 941286#L3219 assume !(1 == ~expectedDirection~0); 941284#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 941283#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 941281#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 941277#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 941275#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 941274#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 941272#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 941266#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 941261#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 941255#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 941253#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 941248#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 941245#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 941246#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 941247#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 941244#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 941242#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 941240#L2596-1 assume !(0 != timeShift_~tmp___9~2); 941241#L2687-3 assume !(1 == ~doorState~0); 955303#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 955301#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 955302#L2205-2 assume !(0 == ~currentFloorID~0); 928761#L2211-2 assume ~currentFloorID~0 > 0; 928762#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 927609#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 927610#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 928819#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 928820#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 955842#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 955840#L2412-3 assume !(1 == ~currentHeading~0); 955838#L2422-9 assume !(0 == ~currentFloorID~0); 955068#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 955064#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 955055#L3207-1 assume !(-1 == ~expectedDirection~0); 955049#L3219-1 assume !(1 == ~expectedDirection~0); 955046#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 955045#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 955044#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 955043#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 955040#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 936258#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 936252#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 936249#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 935677#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 935673#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 935671#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 935669#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 935657#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 935659#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 935663#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 935660#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 935651#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 935652#L2596-2 assume !(0 != timeShift_~tmp___9~2); 954914#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 954915#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 954910#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 954911#L2205-4 assume !(0 == ~currentFloorID~0); 928846#L2211-4 assume ~currentFloorID~0 > 0; 925159#L2212-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 925160#L494-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 928922#L521-48 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 925106#L2216-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 923106#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 971957#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 971956#L2412-6 assume !(1 == ~currentHeading~0); 971953#L2422-18 assume !(0 == ~currentFloorID~0); 971952#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 971947#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 971945#L3207-2 assume !(-1 == ~expectedDirection~0); 971942#L3219-2 assume !(1 == ~expectedDirection~0); 971940#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 971932#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 971929#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 971927#L765-1 assume 0 == initPersonOnFloor_~floor; 971906#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 971886#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 971884#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 971885#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 978597#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 978594#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 978593#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 978592#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 966790#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 966780#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 966763#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 966762#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 966761#L494-63 assume !(0 == isFloorCalling_~floorID); 966760#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 966739#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 966718#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 966719#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 966744#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 966740#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 966720#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 966721#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 963336#L2596-3 assume !(0 != timeShift_~tmp___9~2); 928802#L2687-9 assume !(1 == ~doorState~0); 928799#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 928792#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 928789#L2205-6 assume !(0 == ~currentFloorID~0); 928780#L2211-6 assume ~currentFloorID~0 > 0; 925282#L2212-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 925109#L2226-6 assume ~currentFloorID~0 > 0; 928686#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 928739#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 960434#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 960413#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 960410#L2412-9 assume !(1 == ~currentHeading~0); 960404#L2422-27 assume !(0 == ~currentFloorID~0); 960119#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 960109#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 985251#L3207-3 assume !(-1 == ~expectedDirection~0); 985248#L3219-3 assume !(1 == ~expectedDirection~0); 985246#L3220-3 cleanup_~i~0 := 0; 985244#L1268-2 [2019-12-07 18:28:09,229 INFO L796 eck$LassoCheckResult]: Loop: 985244#L1268-2 assume !false; 985243#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 985242#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 985241#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 985240#L1276 assume 1 != cleanup_~tmp___0~0; 985239#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 985238#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 985237#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 984708#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 984707#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 984706#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 984705#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 984704#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 984702#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 984700#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 984687#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 982263#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 982255#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 982228#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 982227#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 982226#L494-89 assume !(0 == isFloorCalling_~floorID); 982223#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 982221#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 982220#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 982219#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 982203#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 982200#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 982198#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 982197#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 982190#L2596-4 assume !(0 != timeShift_~tmp___9~2); 928729#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 928728#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 928726#L2036-8 assume 1 == stopRequestedInDirection_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~5;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~5;isTopFloor_~retValue_acc~5 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~5; 928727#L1068-20 stopRequestedInDirection_#t~ret65 := isTopFloor_#res;stopRequestedInDirection_~tmp~19 := stopRequestedInDirection_#t~ret65;havoc stopRequestedInDirection_#t~ret65; 928953#L2040-8 assume !(0 != stopRequestedInDirection_~tmp~19); 928954#L2046-8 assume !(~currentFloorID~0 < 0); 929012#L2061-8 assume ~currentFloorID~0 < 0; 923753#L2063-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 923754#L2064-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 922206#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 990063#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 924035#L2412-12 assume !(1 == ~currentHeading~0); 924036#L2422-36 assume !(0 == ~currentFloorID~0); 923860#L2422-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 926976#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 985257#L3207-4 assume !(-1 == ~expectedDirection~0); 985254#L3219-4 assume !(1 == ~expectedDirection~0); 985245#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 985244#L1268-2 [2019-12-07 18:28:09,229 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:09,229 INFO L82 PathProgramCache]: Analyzing trace with hash 1162021650, now seen corresponding path program 1 times [2019-12-07 18:28:09,229 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:09,229 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396948226] [2019-12-07 18:28:09,229 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:09,241 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:09,270 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:09,270 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396948226] [2019-12-07 18:28:09,270 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:09,270 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:09,270 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1441036064] [2019-12-07 18:28:09,271 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:09,271 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:09,271 INFO L82 PathProgramCache]: Analyzing trace with hash -167258924, now seen corresponding path program 1 times [2019-12-07 18:28:09,271 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:09,271 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1413598489] [2019-12-07 18:28:09,271 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:09,275 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:09,293 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:09,293 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1413598489] [2019-12-07 18:28:09,293 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:09,293 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 18:28:09,293 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [193435334] [2019-12-07 18:28:09,294 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:09,294 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:09,294 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 18:28:09,294 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=9, Invalid=21, Unknown=0, NotChecked=0, Total=30 [2019-12-07 18:28:09,294 INFO L87 Difference]: Start difference. First operand 103867 states and 192591 transitions. cyclomatic complexity: 88725 Second operand 6 states. [2019-12-07 18:28:11,164 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:11,164 INFO L93 Difference]: Finished difference Result 289985 states and 538803 transitions. [2019-12-07 18:28:11,164 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 13 states. [2019-12-07 18:28:11,164 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 289985 states and 538803 transitions. [2019-12-07 18:28:12,036 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 71924 [2019-12-07 18:28:12,727 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 289985 states to 289985 states and 538803 transitions. [2019-12-07 18:28:12,727 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 289985 [2019-12-07 18:28:12,906 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 289985 [2019-12-07 18:28:12,907 INFO L73 IsDeterministic]: Start isDeterministic. Operand 289985 states and 538803 transitions. [2019-12-07 18:28:13,035 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:13,035 INFO L688 BuchiCegarLoop]: Abstraction has 289985 states and 538803 transitions. [2019-12-07 18:28:13,180 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 289985 states and 538803 transitions. [2019-12-07 18:28:14,340 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 289985 to 150049. [2019-12-07 18:28:14,340 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 150049 states. [2019-12-07 18:28:18,222 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150049 states to 150049 states and 278171 transitions. [2019-12-07 18:28:18,222 INFO L711 BuchiCegarLoop]: Abstraction has 150049 states and 278171 transitions. [2019-12-07 18:28:18,222 INFO L591 BuchiCegarLoop]: Abstraction has 150049 states and 278171 transitions. [2019-12-07 18:28:18,223 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-12-07 18:28:18,223 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 150049 states and 278171 transitions. [2019-12-07 18:28:18,464 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36680 [2019-12-07 18:28:18,464 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:18,464 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:18,466 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:18,466 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:18,466 INFO L794 eck$LassoCheckResult]: Stem: 1320627#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 1320628#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 1319315#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1318726#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1318727#L1462 assume 0 != main_~tmp~11; 1320089#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1318901#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1318902#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1318577#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1318578#L765 assume 0 == initPersonOnFloor_~floor; 1317169#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1315839#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1317686#L557 assume !(0 == callOnFloor_~floorID); 1321272#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1319323#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1323839#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1323838#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1323837#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1323836#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1323832#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1320529#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1320530#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1322942#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1322943#L494 assume !(0 == isFloorCalling_~floorID); 1319755#L498 assume !(1 == isFloorCalling_~floorID); 1319756#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1317616#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1317617#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1322294#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1322295#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1323740#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1323739#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1323738#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1323737#L2596 assume !(0 != timeShift_~tmp___9~2); 1323736#L2687 assume !(1 == ~doorState~0); 1323735#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1323734#L2036 assume !(1 == stopRequestedInDirection_~dir); 1323733#L2205 assume !(0 == ~currentFloorID~0); 1323732#L2211 assume ~currentFloorID~0 > 0; 1322814#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1319829#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1317575#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1317576#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1316123#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1323070#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1323071#L2412 assume !(1 == ~currentHeading~0); 1324161#L2422 assume !(0 == ~currentFloorID~0); 1324160#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1324156#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1324154#L3207 assume !(-1 == ~expectedDirection~0); 1324151#L3219 assume !(1 == ~expectedDirection~0); 1324149#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1324148#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1324147#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1324146#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1323564#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1324143#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1324141#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1324139#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1324137#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1324136#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1324134#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1324133#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1324131#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1324123#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1324124#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1329037#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1329034#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1329031#L2596-1 assume !(0 != timeShift_~tmp___9~2); 1329028#L2687-3 assume !(1 == ~doorState~0); 1329026#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1329024#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1329020#L2205-2 assume !(0 == ~currentFloorID~0); 1329021#L2211-2 assume ~currentFloorID~0 > 0; 1329647#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1329648#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1329649#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1329645#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1329646#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1329660#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1361161#L2412-3 assume !(1 == ~currentHeading~0); 1328517#L2422-9 assume !(0 == ~currentFloorID~0); 1324976#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1324964#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1346520#L3207-1 assume !(-1 == ~expectedDirection~0); 1346508#L3219-1 assume !(1 == ~expectedDirection~0); 1342669#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1342666#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1342667#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1350382#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1331168#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1342397#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1342393#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1342389#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1342385#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1342382#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1342379#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1342376#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1342374#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1342371#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1342362#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1342359#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1342356#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1342353#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1342350#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1342348#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1342346#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1342342#L2205-4 assume !(0 == ~currentFloorID~0); 1342343#L2211-4 assume ~currentFloorID~0 > 0; 1346826#L2212-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1346827#L494-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1346828#L521-48 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1346824#L2216-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1346825#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1346835#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1366818#L2412-6 assume !(1 == ~currentHeading~0); 1334981#L2422-18 assume !(0 == ~currentFloorID~0); 1331372#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1368960#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1368958#L3207-2 assume !(-1 == ~expectedDirection~0); 1368952#L3219-2 assume !(1 == ~expectedDirection~0); 1368950#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1368946#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1368938#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1368936#L765-1 assume 0 == initPersonOnFloor_~floor; 1368924#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1368903#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1368870#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1368871#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1384452#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1384450#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1384449#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1384446#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1365142#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1365135#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1365120#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1365119#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1365118#L494-63 assume !(0 == isFloorCalling_~floorID); 1364614#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1364615#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1413828#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1413829#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1413836#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1413832#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1413830#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1413831#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1413820#L2596-3 assume !(0 != timeShift_~tmp___9~2); 1323263#L2687-9 assume !(1 == ~doorState~0); 1323264#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1430667#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1430666#L2205-6 assume !(0 == ~currentFloorID~0); 1430664#L2211-6 assume ~currentFloorID~0 > 0; 1430663#L2212-6 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1323171#L2226-6 assume ~currentFloorID~0 > 0; 1430651#L2228-6 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1430652#L2229-6 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1428975#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1428976#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1321066#L2412-9 assume !(1 == ~currentHeading~0); 1318815#L2422-27 assume !(0 == ~currentFloorID~0); 1318798#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1318779#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1320077#L3207-3 assume !(-1 == ~expectedDirection~0); 1318534#L3219-3 assume !(1 == ~expectedDirection~0); 1318535#L3220-3 cleanup_~i~0 := 0; 1318728#L1268-2 [2019-12-07 18:28:18,467 INFO L796 eck$LassoCheckResult]: Loop: 1318728#L1268-2 assume !false; 1321207#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1320927#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1318450#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1318451#L1276 assume 1 != cleanup_~tmp___0~0; 1318972#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1318974#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1319602#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1322385#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1427549#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1427548#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1405161#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1403214#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1383803#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1379494#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1379493#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1373001#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1407591#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1407586#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1407585#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1407584#L494-89 assume !(0 == isFloorCalling_~floorID); 1371543#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1371544#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1414308#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1414309#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1414314#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1414312#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1414310#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1414311#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1414298#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1414299#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1464702#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1464701#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1464700#L2205-8 assume !(0 == ~currentFloorID~0); 1464698#L2211-8 assume ~currentFloorID~0 > 0; 1464697#L2212-8 assume !(0 != stopRequestedInDirection_~respectFloorCalls); 1374289#L2226-8 assume ~currentFloorID~0 > 0; 1320165#L2228-8 assume 0 != stopRequestedInDirection_~respectInLiftCalls; 1320167#L2229-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1374097#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1374098#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1321089#L2412-12 assume !(1 == ~currentHeading~0); 1321090#L2422-36 assume !(0 == ~currentFloorID~0); 1463269#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1463266#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1321149#L3207-4 assume !(-1 == ~expectedDirection~0); 1318542#L3219-4 assume !(1 == ~expectedDirection~0); 1318544#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1318728#L1268-2 [2019-12-07 18:28:18,467 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:18,467 INFO L82 PathProgramCache]: Analyzing trace with hash 1747722477, now seen corresponding path program 1 times [2019-12-07 18:28:18,467 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:18,467 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1053050651] [2019-12-07 18:28:18,467 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:18,477 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:18,515 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:18,515 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1053050651] [2019-12-07 18:28:18,515 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:18,516 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:18,516 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1496938292] [2019-12-07 18:28:18,516 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:18,516 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:18,516 INFO L82 PathProgramCache]: Analyzing trace with hash 2073445639, now seen corresponding path program 1 times [2019-12-07 18:28:18,517 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:18,517 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1099524774] [2019-12-07 18:28:18,517 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:18,522 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:18,534 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:18,535 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1099524774] [2019-12-07 18:28:18,535 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:18,535 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:18,535 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [460849310] [2019-12-07 18:28:18,535 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:18,536 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:18,536 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 18:28:18,536 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 18:28:18,536 INFO L87 Difference]: Start difference. First operand 150049 states and 278171 transitions. cyclomatic complexity: 128123 Second operand 4 states. [2019-12-07 18:28:19,868 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:19,868 INFO L93 Difference]: Finished difference Result 173863 states and 319627 transitions. [2019-12-07 18:28:19,869 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 18:28:19,869 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 173863 states and 319627 transitions. [2019-12-07 18:28:20,367 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 41780 [2019-12-07 18:28:20,751 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 173863 states to 173863 states and 319627 transitions. [2019-12-07 18:28:20,751 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 173863 [2019-12-07 18:28:20,861 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 173863 [2019-12-07 18:28:20,861 INFO L73 IsDeterministic]: Start isDeterministic. Operand 173863 states and 319627 transitions. [2019-12-07 18:28:20,942 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:20,942 INFO L688 BuchiCegarLoop]: Abstraction has 173863 states and 319627 transitions. [2019-12-07 18:28:21,034 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 173863 states and 319627 transitions. [2019-12-07 18:28:21,855 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 173863 to 150049. [2019-12-07 18:28:21,855 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 150049 states. [2019-12-07 18:28:22,621 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 150049 states to 150049 states and 277309 transitions. [2019-12-07 18:28:22,621 INFO L711 BuchiCegarLoop]: Abstraction has 150049 states and 277309 transitions. [2019-12-07 18:28:22,621 INFO L591 BuchiCegarLoop]: Abstraction has 150049 states and 277309 transitions. [2019-12-07 18:28:22,621 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-12-07 18:28:22,621 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 150049 states and 277309 transitions. [2019-12-07 18:28:22,827 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 36680 [2019-12-07 18:28:22,827 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:22,827 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:22,829 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:22,829 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:22,829 INFO L794 eck$LassoCheckResult]: Stem: 1644289#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 1644290#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 1643154#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 1642595#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 1642596#L1462 assume 0 != main_~tmp~11; 1643813#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1642763#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1642764#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1642448#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1642449#L765 assume 0 == initPersonOnFloor_~floor; 1641059#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1639761#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1641565#L557 assume !(0 == callOnFloor_~floorID); 1644830#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 1643162#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1639758#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1639759#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1641367#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1641368#L3138 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1643700#L1849-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1745473#L1870-5 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1745453#L3142 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1745452#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1745451#L494 assume !(0 == isFloorCalling_~floorID); 1745450#L498 assume !(1 == isFloorCalling_~floorID); 1745447#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1745446#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1745445#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1745444#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1745443#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1745439#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1745438#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1745437#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1745436#L2596 assume !(0 != timeShift_~tmp___9~2); 1745435#L2687 assume !(1 == ~doorState~0); 1745434#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1745433#L2036 assume !(1 == stopRequestedInDirection_~dir); 1745432#L2205 assume !(0 == ~currentFloorID~0); 1745431#L2211 assume ~currentFloorID~0 > 0; 1745430#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1745429#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1745428#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1745426#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1745427#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1748125#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1748123#L2412 assume !(1 == ~currentHeading~0); 1748121#L2422 assume !(0 == ~currentFloorID~0); 1748118#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1689659#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1748110#L3207 assume !(-1 == ~expectedDirection~0); 1748104#L3219 assume !(1 == ~expectedDirection~0); 1748099#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1748097#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1748095#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1748093#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1689365#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1748087#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1748083#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1748079#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1748075#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1748072#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1748069#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1748066#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1748064#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1748058#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1748052#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1748049#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1748046#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1748043#L2596-1 assume !(0 != timeShift_~tmp___9~2); 1748038#L2687-3 assume !(1 == ~doorState~0); 1748039#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1748034#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 1748035#L2205-2 assume !(0 == ~currentFloorID~0); 1758689#L2211-2 assume ~currentFloorID~0 > 0; 1758676#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1758667#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1758657#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1758645#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1758633#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1758623#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1758622#L2412-3 assume !(1 == ~currentHeading~0); 1750516#L2422-9 assume !(0 == ~currentFloorID~0); 1749919#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1689295#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1758606#L3207-1 assume !(-1 == ~expectedDirection~0); 1758517#L3219-1 assume !(1 == ~expectedDirection~0); 1758507#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1758502#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1754876#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1754855#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1688775#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1732580#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1732578#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1732576#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1732574#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1692271#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1692269#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1692268#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1692267#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1692265#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1692261#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1692259#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1692258#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1692256#L2596-2 assume !(0 != timeShift_~tmp___9~2); 1692254#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1692255#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1692250#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 1692251#L2205-4 assume !(0 == ~currentFloorID~0); 1754761#L2211-4 assume ~currentFloorID~0 > 0; 1754735#L2212-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1754723#L494-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1754711#L521-48 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1754702#L2216-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1754689#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1754688#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1754687#L2412-6 assume !(1 == ~currentHeading~0); 1750598#L2422-18 assume !(0 == ~currentFloorID~0); 1691965#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1691370#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1754685#L3207-2 assume !(-1 == ~expectedDirection~0); 1754682#L3219-2 assume !(1 == ~expectedDirection~0); 1754680#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 1754668#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 1754665#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1754664#L765-1 assume 0 == initPersonOnFloor_~floor; 1754557#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1754535#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1754531#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1754532#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1767403#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1767402#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1767400#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1675958#L3138-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1767395#L1849-38 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1767388#L1870-38 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1767349#L3142-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1767348#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1767347#L494-63 assume !(0 == isFloorCalling_~floorID); 1767344#L498-63 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1767345#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1778258#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1778259#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 1778251#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1778246#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1778245#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1778229#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1777865#L2596-3 assume !(0 != timeShift_~tmp___9~2); 1766474#L2687-9 assume !(1 == ~doorState~0); 1766472#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1766470#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 1766468#L2205-6 assume !(0 == ~currentFloorID~0); 1766465#L2211-6 assume ~currentFloorID~0 > 0; 1766463#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1766461#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1766459#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1766457#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1642256#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1783874#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1644692#L2412-9 assume !(1 == ~currentHeading~0); 1642680#L2422-27 assume !(0 == ~currentFloorID~0); 1642660#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1642646#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1767666#L3207-3 assume !(-1 == ~expectedDirection~0); 1767660#L3219-3 assume !(1 == ~expectedDirection~0); 1767658#L3220-3 cleanup_~i~0 := 0; 1767656#L1268-2 [2019-12-07 18:28:22,829 INFO L796 eck$LassoCheckResult]: Loop: 1767656#L1268-2 assume !false; 1767655#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1767654#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 1703642#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 1703638#L1276 assume 1 != cleanup_~tmp___0~0; 1703639#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1775457#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1775456#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 1775455#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 1692511#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 1775454#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 1775453#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 1775452#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 1775451#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 1775450#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 1659676#L3138-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1775448#L1849-49 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1775444#L1870-49 __utac_acc__Specification3_spec__1_#t~ret156 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~3 := __utac_acc__Specification3_spec__1_#t~ret156;havoc __utac_acc__Specification3_spec__1_#t~ret156; 1775439#L3142-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~3;~expectedDirection~0 := -1; 1775438#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1775437#L494-89 assume !(0 == isFloorCalling_~floorID); 1775434#L498-89 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1775428#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 1775423#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 1775424#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 1775430#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 1775427#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 1775425#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 1775426#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 1775414#L2596-4 assume !(0 != timeShift_~tmp___9~2); 1646456#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 1646448#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 1646444#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 1646445#L2205-8 assume !(0 == ~currentFloorID~0); 1646440#L2211-8 assume ~currentFloorID~0 > 0; 1646438#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 1646439#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 1646434#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 1646435#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 1642259#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 1783790#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 1644706#L2412-12 assume !(1 == ~currentHeading~0); 1642653#L2422-36 assume !(0 == ~currentFloorID~0); 1642654#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1642639#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 1767669#L3207-4 assume !(-1 == ~expectedDirection~0); 1767663#L3219-4 assume !(1 == ~expectedDirection~0); 1767657#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 1767656#L1268-2 [2019-12-07 18:28:22,829 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:22,830 INFO L82 PathProgramCache]: Analyzing trace with hash 188096272, now seen corresponding path program 1 times [2019-12-07 18:28:22,830 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:22,830 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [506895870] [2019-12-07 18:28:22,830 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:22,839 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:22,871 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:22,871 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [506895870] [2019-12-07 18:28:22,871 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:22,872 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:22,872 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1319280301] [2019-12-07 18:28:22,872 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:22,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:22,872 INFO L82 PathProgramCache]: Analyzing trace with hash 513819434, now seen corresponding path program 1 times [2019-12-07 18:28:22,873 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:22,873 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [505521489] [2019-12-07 18:28:22,873 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:22,878 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:22,888 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:22,889 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [505521489] [2019-12-07 18:28:22,889 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:22,889 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 18:28:22,889 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1233482178] [2019-12-07 18:28:22,889 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:22,890 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:22,890 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 18:28:22,890 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 18:28:22,890 INFO L87 Difference]: Start difference. First operand 150049 states and 277309 transitions. cyclomatic complexity: 127261 Second operand 3 states. [2019-12-07 18:28:23,537 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:23,537 INFO L93 Difference]: Finished difference Result 218155 states and 403135 transitions. [2019-12-07 18:28:23,537 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 18:28:23,538 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 218155 states and 403135 transitions. [2019-12-07 18:28:24,247 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 52884 [2019-12-07 18:28:24,806 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 218155 states to 218155 states and 403135 transitions. [2019-12-07 18:28:24,806 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 218155 [2019-12-07 18:28:24,955 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 218155 [2019-12-07 18:28:24,955 INFO L73 IsDeterministic]: Start isDeterministic. Operand 218155 states and 403135 transitions. [2019-12-07 18:28:25,055 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:25,055 INFO L688 BuchiCegarLoop]: Abstraction has 218155 states and 403135 transitions. [2019-12-07 18:28:25,176 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 218155 states and 403135 transitions. [2019-12-07 18:28:29,097 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 218155 to 214611. [2019-12-07 18:28:29,098 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 214611 states. [2019-12-07 18:28:29,402 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 214611 states to 214611 states and 397095 transitions. [2019-12-07 18:28:29,402 INFO L711 BuchiCegarLoop]: Abstraction has 214611 states and 397095 transitions. [2019-12-07 18:28:29,402 INFO L591 BuchiCegarLoop]: Abstraction has 214611 states and 397095 transitions. [2019-12-07 18:28:29,402 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-12-07 18:28:29,402 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 214611 states and 397095 transitions. [2019-12-07 18:28:29,843 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 51852 [2019-12-07 18:28:29,843 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:29,843 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:29,846 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:29,846 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:29,846 INFO L794 eck$LassoCheckResult]: Stem: 2012610#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 2012611#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 2011386#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 2010805#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 2010806#L1462 assume 0 != main_~tmp~11; 2012100#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2010979#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2010980#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2010661#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2010662#L765 assume 0 == initPersonOnFloor_~floor; 2009278#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2007973#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2009782#L557 assume !(0 == callOnFloor_~floorID); 2013206#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2011394#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2020052#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2020051#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2020050#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2020048#L3138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2011453#L3148 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2008111#L3159 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2009652#L3170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2013424#L3181 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2014337#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2011878#L494 assume !(0 == isFloorCalling_~floorID); 2011879#L498 assume !(1 == isFloorCalling_~floorID); 2009273#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2008175#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2008644#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2008646#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2013501#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2013502#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2010520#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2010521#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2014867#L2596 assume !(0 != timeShift_~tmp___9~2); 2014868#L2687 assume !(1 == ~doorState~0); 2010892#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2010893#L2036 assume !(1 == stopRequestedInDirection_~dir); 2014006#L2205 assume !(0 == ~currentFloorID~0); 2014007#L2211 assume ~currentFloorID~0 > 0; 2014669#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2014670#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2009667#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2009668#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2020276#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2020274#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2020275#L2412 assume !(1 == ~currentHeading~0); 2020989#L2422 assume !(0 == ~currentFloorID~0); 2020985#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2020980#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2020813#L3207 assume !(-1 == ~expectedDirection~0); 2020814#L3219 assume !(1 == ~expectedDirection~0); 2020769#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2020768#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2020767#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2020766#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2014870#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2020765#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2025946#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2025943#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2025939#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2025940#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2020867#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2020868#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2020860#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2020862#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2020581#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2020582#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2020559#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2020560#L2596-1 assume !(0 != timeShift_~tmp___9~2); 2020450#L2687-3 assume !(1 == ~doorState~0); 2020451#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2020399#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 2020400#L2205-2 assume !(0 == ~currentFloorID~0); 2026540#L2211-2 assume ~currentFloorID~0 > 0; 2026538#L2212-2 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2026537#L494-27 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2026524#L521-27 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2026511#L2216-2 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2026467#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2026468#L2695-1 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2041929#L2412-3 assume !(1 == ~currentHeading~0); 2041908#L2422-9 assume !(0 == ~currentFloorID~0); 2015630#L2422-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2041903#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2041901#L3207-1 assume !(-1 == ~expectedDirection~0); 2041900#L3219-1 assume !(1 == ~expectedDirection~0); 2041896#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2036927#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2036928#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2036920#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2026668#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2036913#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2036909#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2036905#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2036901#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2036898#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2036895#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2036892#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2036890#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2036887#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2036878#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2036875#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2036872#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2036869#L2596-2 assume !(0 != timeShift_~tmp___9~2); 2036866#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2036864#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2036862#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 2036859#L2205-4 assume !(0 == ~currentFloorID~0); 2036860#L2211-4 assume ~currentFloorID~0 > 0; 2073448#L2212-4 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2074155#L494-48 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2074154#L521-48 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2073463#L2216-4 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2073210#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2073211#L2695-2 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2115154#L2412-6 assume !(1 == ~currentHeading~0); 2037131#L2422-18 assume !(0 == ~currentFloorID~0); 2036722#L2422-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2115127#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2115125#L3207-2 assume !(-1 == ~expectedDirection~0); 2115123#L3219-2 assume !(1 == ~expectedDirection~0); 2115105#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2113337#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2113330#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2113327#L765-1 assume 0 == initPersonOnFloor_~floor; 2107409#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2100463#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2100418#L557-2 assume !(0 == callOnFloor_~floorID); 2100153#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2099991#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2099988#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2099985#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2099745#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2035608#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2099970#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2099967#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2099964#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2099961#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2099959#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2099955#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2099953#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2099951#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2099944#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2099939#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2099935#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2099933#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2099929#L2596-3 assume !(0 != timeShift_~tmp___9~2); 2099927#L2687-9 assume !(1 == ~doorState~0); 2099925#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2099922#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 2099915#L2205-6 assume !(0 == ~currentFloorID~0); 2099916#L2211-6 assume ~currentFloorID~0 > 0; 2142898#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2142896#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2142895#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2142878#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2142864#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2142861#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2142788#L2412-9 assume !(1 == ~currentHeading~0); 2142787#L2422-27 assume !(0 == ~currentFloorID~0); 2142779#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2142773#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2142771#L3207-3 assume !(-1 == ~expectedDirection~0); 2142768#L3219-3 assume !(1 == ~expectedDirection~0); 2142763#L3220-3 cleanup_~i~0 := 0; 2142761#L1268-2 [2019-12-07 18:28:29,846 INFO L796 eck$LassoCheckResult]: Loop: 2142761#L1268-2 assume !false; 2142760#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2142759#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 2142758#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 2142757#L1276 assume 1 != cleanup_~tmp___0~0; 2142755#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2142751#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2142749#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 2142747#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 2142745#L1944 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2142744#L494-85 assume !(0 == isFloorCalling_~floorID); 2142741#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2142739#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 2142693#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 2142682#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 2142678#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 2142674#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2099519#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2099520#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2099514#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2093509#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2142672#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2142670#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2142668#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2142666#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2142664#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2142660#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2142658#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2142656#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2142650#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2142644#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2142640#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2142638#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2142634#L2596-4 assume !(0 != timeShift_~tmp___9~2); 2142632#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2142630#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2142628#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 2142624#L2205-8 assume !(0 == ~currentFloorID~0); 2142625#L2211-8 assume ~currentFloorID~0 > 0; 2143116#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2143095#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2143087#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2143066#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2143065#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2143059#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2143036#L2412-12 assume !(1 == ~currentHeading~0); 2143023#L2422-36 assume !(0 == ~currentFloorID~0); 2098603#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2143018#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2143016#L3207-4 assume !(-1 == ~expectedDirection~0); 2142997#L3219-4 assume !(1 == ~expectedDirection~0); 2142762#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2142761#L1268-2 [2019-12-07 18:28:29,847 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:29,847 INFO L82 PathProgramCache]: Analyzing trace with hash 1020370937, now seen corresponding path program 1 times [2019-12-07 18:28:29,847 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:29,847 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [75011939] [2019-12-07 18:28:29,847 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:29,858 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:29,890 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:29,890 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [75011939] [2019-12-07 18:28:29,890 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:29,890 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:29,890 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [837543419] [2019-12-07 18:28:29,890 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:29,890 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:29,891 INFO L82 PathProgramCache]: Analyzing trace with hash 918299711, now seen corresponding path program 1 times [2019-12-07 18:28:29,891 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:29,891 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1482715401] [2019-12-07 18:28:29,891 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:29,894 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:29,903 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:29,904 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1482715401] [2019-12-07 18:28:29,904 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:29,904 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:29,904 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [595685740] [2019-12-07 18:28:29,904 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:29,904 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:29,904 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 18:28:29,905 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 18:28:29,905 INFO L87 Difference]: Start difference. First operand 214611 states and 397095 transitions. cyclomatic complexity: 182485 Second operand 4 states. [2019-12-07 18:28:32,601 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:32,601 INFO L93 Difference]: Finished difference Result 222179 states and 408511 transitions. [2019-12-07 18:28:32,601 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 18:28:32,601 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 222179 states and 408511 transitions. [2019-12-07 18:28:33,315 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 53002 [2019-12-07 18:28:34,215 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 222179 states to 220655 states and 405787 transitions. [2019-12-07 18:28:34,215 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 220655 [2019-12-07 18:28:34,340 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 220655 [2019-12-07 18:28:34,341 INFO L73 IsDeterministic]: Start isDeterministic. Operand 220655 states and 405787 transitions. [2019-12-07 18:28:34,437 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:34,437 INFO L688 BuchiCegarLoop]: Abstraction has 220655 states and 405787 transitions. [2019-12-07 18:28:34,543 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 220655 states and 405787 transitions. [2019-12-07 18:28:35,756 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 220655 to 200753. [2019-12-07 18:28:35,756 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 200753 states. [2019-12-07 18:28:36,486 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 200753 states to 200753 states and 370693 transitions. [2019-12-07 18:28:36,487 INFO L711 BuchiCegarLoop]: Abstraction has 200753 states and 370693 transitions. [2019-12-07 18:28:36,487 INFO L591 BuchiCegarLoop]: Abstraction has 200753 states and 370693 transitions. [2019-12-07 18:28:36,487 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-12-07 18:28:36,487 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 200753 states and 370693 transitions. [2019-12-07 18:28:36,803 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 48410 [2019-12-07 18:28:36,803 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:36,803 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:36,805 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:36,805 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:36,806 INFO L794 eck$LassoCheckResult]: Stem: 2449370#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 2449371#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 2448174#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 2447595#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 2447596#L1462 assume 0 != main_~tmp~11; 2448877#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2447771#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2447772#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2447451#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2447452#L765 assume 0 == initPersonOnFloor_~floor; 2446078#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2444775#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2446576#L557 assume !(0 == callOnFloor_~floorID); 2449949#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 2448182#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2444769#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2444770#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2467730#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2467729#L3138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2448246#L3148 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2444913#L3159 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2446451#L3170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2450163#L3181 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2451073#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2448677#L494 assume !(0 == isFloorCalling_~floorID); 2448598#L498 assume !(1 == isFloorCalling_~floorID); 2446072#L502 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2444977#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2445443#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2445445#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2450235#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2449283#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2447310#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2447311#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2451574#L2596 assume !(0 != timeShift_~tmp___9~2); 2447938#L2687 assume !(1 == ~doorState~0); 2447683#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2447684#L2036 assume !(1 == stopRequestedInDirection_~dir); 2450733#L2205 assume !(0 == ~currentFloorID~0); 2450734#L2211 assume ~currentFloorID~0 > 0; 2451377#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2448661#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2446466#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2446467#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2451318#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2509791#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2509938#L2412 assume !(1 == ~currentHeading~0); 2509930#L2422 assume !(0 == ~currentFloorID~0); 2509925#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2509920#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2509918#L3207 assume !(-1 == ~expectedDirection~0); 2509910#L3219 assume !(1 == ~expectedDirection~0); 2509906#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2509905#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2509904#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2509903#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2451576#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2509902#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2644676#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2644675#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2644674#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2611293#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2611294#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2644673#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2644672#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2644667#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2644666#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2644664#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2644663#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2644662#L2596-1 assume !(0 != timeShift_~tmp___9~2); 2644661#L2687-3 assume !(1 == ~doorState~0); 2641890#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2641110#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 2641025#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2641024#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2641019#L2695-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2641017#L2467-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2641016#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2641014#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 2640976#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2640971#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2640970#L2704-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2640353#L2412-5 assume !(1 == ~currentHeading~0); 2615070#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2548759#L2422-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2458509#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2525663#L3207-1 assume !(-1 == ~expectedDirection~0); 2525658#L3219-1 assume !(1 == ~expectedDirection~0); 2525657#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2525656#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2525655#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2525653#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2525654#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2545470#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2641962#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2641960#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2641958#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2609123#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2609124#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2446763#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2445448#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2445450#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2449410#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2447313#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2447314#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2640314#L2596-2 assume !(0 != timeShift_~tmp___9~2); 2640312#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2447668#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2447669#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 2640261#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2640257#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2640252#L2695-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 2640247#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 2640241#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2640230#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 2640221#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2640202#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 2640201#L2704-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2449791#L2412-8 assume !(1 == ~currentHeading~0); 2447681#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 2447682#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 2466534#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2466532#L3207-2 assume !(-1 == ~expectedDirection~0); 2466516#L3219-2 assume !(1 == ~expectedDirection~0); 2466480#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 2466476#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 2466473#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2466471#L765-1 assume 0 == initPersonOnFloor_~floor; 2466333#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2466314#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2462484#L557-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2462485#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2563625#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2563622#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2563618#L3076-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~1; 2563619#L3077-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2446697#L1849-33 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2449416#L1870-33 __utac_acc__Specification3_spec__1_#t~ret151 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~3 := __utac_acc__Specification3_spec__1_#t~ret151;havoc __utac_acc__Specification3_spec__1_#t~ret151; 2449417#L3081-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~3;~expectedDirection~0 := 1; 2449592#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2568609#L494-63 assume !(0 == isFloorCalling_~floorID); 2568607#L498-63 assume !(1 == isFloorCalling_~floorID); 2568604#L502-63 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2568599#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2568595#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2568596#L1849-43 assume !(0 == buttonForFloorIsPressed_~floorID); 2568603#L1853-43 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2568598#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2568597#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2568594#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2568590#L2596-3 assume !(0 != timeShift_~tmp___9~2); 2568591#L2687-9 assume !(1 == ~doorState~0); 2607094#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2607092#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 2607093#L2205-6 assume !(0 == ~currentFloorID~0); 2611907#L2211-6 assume ~currentFloorID~0 > 0; 2611908#L2212-6 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2614458#L494-69 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2614456#L521-69 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2611909#L2216-6 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2611910#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2611951#L2695-3 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2611947#L2412-9 assume !(1 == ~currentHeading~0); 2611948#L2422-27 assume !(0 == ~currentFloorID~0); 2611943#L2422-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2466702#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2641921#L3207-3 assume !(-1 == ~expectedDirection~0); 2641919#L3219-3 assume !(1 == ~expectedDirection~0); 2641897#L3220-3 cleanup_~i~0 := 0; 2641891#L1268-2 [2019-12-07 18:28:36,806 INFO L796 eck$LassoCheckResult]: Loop: 2641891#L1268-2 assume !false; 2641892#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2640946#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 2640947#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 2639048#L1276 assume 1 != cleanup_~tmp___0~0; 2639049#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2639044#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2639045#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 2539811#L1940 assume 0 != anyStopRequested_~tmp___3~0;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 2539812#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 2539805#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 2539806#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 2539671#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 2539672#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 2467974#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 2466581#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2467970#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2467971#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2467968#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2467969#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2607707#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2607708#L494-89 assume !(0 == isFloorCalling_~floorID); 2607692#L498-89 assume !(1 == isFloorCalling_~floorID); 2607682#L502-89 assume 2 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_2~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2607678#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 2607673#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 2607674#L1849-54 assume !(0 == buttonForFloorIsPressed_~floorID); 2607685#L1853-54 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 2607679#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 2607675#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 2591631#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 2591632#L2596-4 assume !(0 != timeShift_~tmp___9~2); 2607668#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 2607666#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 2607664#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 2607662#L2205-8 assume !(0 == ~currentFloorID~0); 2607657#L2211-8 assume ~currentFloorID~0 > 0; 2607656#L2212-8 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 2607655#L494-95 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 2607654#L521-95 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 2607650#L2216-8 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 2607651#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 2607787#L2695-4 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 2449806#L2412-12 assume !(1 == ~currentHeading~0); 2447657#L2422-36 assume !(0 == ~currentFloorID~0); 2447658#L2422-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2447642#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 2643844#L3207-4 assume !(-1 == ~expectedDirection~0); 2641908#L3219-4 assume !(1 == ~expectedDirection~0); 2641900#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 2641891#L1268-2 [2019-12-07 18:28:36,806 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:36,806 INFO L82 PathProgramCache]: Analyzing trace with hash -1730873036, now seen corresponding path program 1 times [2019-12-07 18:28:36,806 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:36,807 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2030133785] [2019-12-07 18:28:36,807 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:36,818 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:36,848 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:36,848 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2030133785] [2019-12-07 18:28:36,848 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:36,848 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:36,848 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1307069459] [2019-12-07 18:28:36,849 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:36,849 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:36,849 INFO L82 PathProgramCache]: Analyzing trace with hash -941383292, now seen corresponding path program 1 times [2019-12-07 18:28:36,849 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:36,849 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [99464436] [2019-12-07 18:28:36,849 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:36,852 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:36,899 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:36,899 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [99464436] [2019-12-07 18:28:36,899 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:36,899 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 18:28:36,899 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [186992992] [2019-12-07 18:28:36,899 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:36,899 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:36,899 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 18:28:36,899 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=13, Invalid=29, Unknown=0, NotChecked=0, Total=42 [2019-12-07 18:28:36,899 INFO L87 Difference]: Start difference. First operand 200753 states and 370693 transitions. cyclomatic complexity: 169941 Second operand 7 states. [2019-12-07 18:28:44,036 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:44,036 INFO L93 Difference]: Finished difference Result 433400 states and 794811 transitions. [2019-12-07 18:28:44,036 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-12-07 18:28:44,036 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 433400 states and 794811 transitions. [2019-12-07 18:28:45,553 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 107505 [2019-12-07 18:28:46,601 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 433400 states to 433400 states and 794811 transitions. [2019-12-07 18:28:46,602 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 433400 [2019-12-07 18:28:46,851 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 433400 [2019-12-07 18:28:46,852 INFO L73 IsDeterministic]: Start isDeterministic. Operand 433400 states and 794811 transitions. [2019-12-07 18:28:47,033 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:28:47,034 INFO L688 BuchiCegarLoop]: Abstraction has 433400 states and 794811 transitions. [2019-12-07 18:28:47,240 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 433400 states and 794811 transitions. [2019-12-07 18:28:49,266 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 433400 to 294635. [2019-12-07 18:28:49,267 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294635 states. [2019-12-07 18:28:49,665 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294635 states to 294635 states and 546371 transitions. [2019-12-07 18:28:49,665 INFO L711 BuchiCegarLoop]: Abstraction has 294635 states and 546371 transitions. [2019-12-07 18:28:49,665 INFO L591 BuchiCegarLoop]: Abstraction has 294635 states and 546371 transitions. [2019-12-07 18:28:49,665 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-12-07 18:28:49,665 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 294635 states and 546371 transitions. [2019-12-07 18:28:50,431 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 73744 [2019-12-07 18:28:50,432 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:28:50,432 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:28:50,434 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:50,434 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:28:50,434 INFO L794 eck$LassoCheckResult]: Stem: 3083558#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 3083559#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 3082389#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 3081807#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 3081808#L1462 assume 0 != main_~tmp~11; 3083081#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3081981#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 3081982#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 3081666#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3081667#L765 assume 0 == initPersonOnFloor_~floor; 3080275#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3078962#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3080785#L557 assume !(0 == callOnFloor_~floorID); 3084150#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3082397#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3101197#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3101196#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3101195#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3101194#L3138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3079928#L3148 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3079100#L3159 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3080654#L3170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3084365#L3181 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3085188#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3101538#L494 assume !(0 == isFloorCalling_~floorID); 3101537#L498 assume !(1 == isFloorCalling_~floorID); 3101536#L502 assume !(2 == isFloorCalling_~floorID); 3101534#L506 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3101533#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3101532#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3101531#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 3101530#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3101526#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3101525#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3101524#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3101523#L2596 assume !(0 != timeShift_~tmp___9~2); 3101522#L2687 assume !(1 == ~doorState~0); 3101521#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3101520#L2036 assume !(1 == stopRequestedInDirection_~dir); 3101518#L2205 assume !(0 == ~currentFloorID~0); 3101515#L2211 assume ~currentFloorID~0 > 0; 3101516#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3101519#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3101517#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 3101513#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3101514#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3234969#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3234968#L2412 assume !(1 == ~currentHeading~0); 3234967#L2422 assume !(0 == ~currentFloorID~0); 3234966#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3100405#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3234959#L3207 assume !(-1 == ~expectedDirection~0); 3234960#L3219 assume !(1 == ~expectedDirection~0); 3234954#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3234953#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3234952#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3234951#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3100385#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3234948#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3234946#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3234943#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3234940#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3234938#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3234936#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3234934#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3234933#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3234923#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3234921#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3234919#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3234918#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3234916#L2596-1 assume !(0 != timeShift_~tmp___9~2); 3234915#L2687-3 assume !(1 == ~doorState~0); 3234914#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3234912#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 3234909#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3234910#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3234913#L2695-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3234911#L2467-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3234906#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3234904#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 3234852#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3234846#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3234844#L2704-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3234840#L2412-5 assume !(1 == ~currentHeading~0); 3234736#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3234734#L2422-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3100653#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3100651#L3207-1 assume !(-1 == ~expectedDirection~0); 3100650#L3219-1 assume !(1 == ~expectedDirection~0); 3100646#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3100645#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3100644#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3100641#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3100642#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3240587#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3240581#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3240577#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3240572#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3240554#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3240555#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3234686#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3234685#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3234681#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3234676#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3234674#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3234673#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3234671#L2596-2 assume !(0 != timeShift_~tmp___9~2); 3234670#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 3234669#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3234667#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 3234668#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3257712#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3257711#L2695-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3257710#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3257709#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3257699#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 3257697#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3234634#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3234635#L2704-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3257616#L2412-8 assume !(1 == ~currentHeading~0); 3257511#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3230865#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3100858#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3100818#L3207-2 assume !(-1 == ~expectedDirection~0); 3100799#L3219-2 assume !(1 == ~expectedDirection~0); 3100784#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 3100761#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 3100752#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3100739#L765-1 assume 0 == initPersonOnFloor_~floor; 3093351#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3093300#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3093295#L557-2 assume !(0 == callOnFloor_~floorID); 3093296#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 3093388#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3102560#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3102559#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3093378#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3093380#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3240583#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3240579#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3240574#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3240567#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3230653#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3230654#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3230643#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3230642#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3230640#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3230636#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3230634#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3230633#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3230630#L2596-3 assume !(0 != timeShift_~tmp___9~2); 3230628#L2687-9 assume !(1 == ~doorState~0); 3230626#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3230624#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 3230621#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3230619#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3230618#L2695-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3230617#L2467-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3230616#L2472-6 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3230615#L2036-7 assume !(1 == stopRequestedInDirection_~dir); 3230589#L2205-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3230576#L2358-7 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3230403#L2704-3 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3230404#L2412-11 assume !(1 == ~currentHeading~0); 3230458#L2422-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3230304#L2422-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3093437#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3093434#L3207-3 assume !(-1 == ~expectedDirection~0); 3093185#L3219-3 assume !(1 == ~expectedDirection~0); 3093175#L3220-3 cleanup_~i~0 := 0; 3093164#L1268-2 [2019-12-07 18:28:50,434 INFO L796 eck$LassoCheckResult]: Loop: 3093164#L1268-2 assume !false; 3093151#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3093142#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 3093133#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 3093128#L1276 assume 1 != cleanup_~tmp___0~0; 3092931#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3092932#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3092874#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 3092875#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 3092990#L1944 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3101266#L494-85 assume !(0 == isFloorCalling_~floorID); 3101261#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3101255#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 3101249#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 3101241#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 3101240#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 3101239#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 3101238#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 3101237#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 3101235#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 3101236#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3284516#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3284517#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3284511#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3284513#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3282479#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 3282480#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 3282452#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 3282451#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 3282450#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 3282445#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 3282443#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 3282442#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 3282440#L2596-4 assume !(0 != timeShift_~tmp___9~2); 3282439#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 3282438#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3282437#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 3282433#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3282429#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 3282425#L2695-4 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 3282421#L2467-8 assume 0 == getReverseHeading_~ofHeading;getReverseHeading_~retValue_acc~21 := 1;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 3282412#L2472-8 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 3282405#L2036-9 assume !(1 == stopRequestedInDirection_~dir); 3282386#L2205-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 3277948#L2358-9 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 3230556#L2704-4 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 3230557#L2412-14 assume !(1 == ~currentHeading~0); 3230693#L2422-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 3230543#L2422-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 3093436#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 3093187#L3207-4 assume !(-1 == ~expectedDirection~0); 3093184#L3219-4 assume !(1 == ~expectedDirection~0); 3093174#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 3093164#L1268-2 [2019-12-07 18:28:50,435 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:50,435 INFO L82 PathProgramCache]: Analyzing trace with hash -2030945058, now seen corresponding path program 1 times [2019-12-07 18:28:50,435 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:50,435 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1396877466] [2019-12-07 18:28:50,435 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:50,448 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:50,485 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:50,485 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1396877466] [2019-12-07 18:28:50,485 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:50,485 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:50,485 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [415945726] [2019-12-07 18:28:50,485 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:28:50,485 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:28:50,485 INFO L82 PathProgramCache]: Analyzing trace with hash -421180380, now seen corresponding path program 1 times [2019-12-07 18:28:50,486 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:28:50,486 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1690234898] [2019-12-07 18:28:50,486 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:28:50,490 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:28:50,502 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:28:50,503 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1690234898] [2019-12-07 18:28:50,503 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:28:50,503 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:28:50,503 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1727462137] [2019-12-07 18:28:50,503 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 18:28:50,503 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:28:50,503 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 18:28:50,503 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 18:28:50,503 INFO L87 Difference]: Start difference. First operand 294635 states and 546371 transitions. cyclomatic complexity: 251737 Second operand 4 states. [2019-12-07 18:28:56,101 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:28:56,101 INFO L93 Difference]: Finished difference Result 1122011 states and 2093051 transitions. [2019-12-07 18:28:56,102 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 5 states. [2019-12-07 18:28:56,102 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 1122011 states and 2093051 transitions. [2019-12-07 18:29:00,284 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 286428 [2019-12-07 18:29:08,822 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 1122011 states to 1122011 states and 2093051 transitions. [2019-12-07 18:29:08,822 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 1122011 [2019-12-07 18:29:09,293 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 1122011 [2019-12-07 18:29:09,293 INFO L73 IsDeterministic]: Start isDeterministic. Operand 1122011 states and 2093051 transitions. [2019-12-07 18:29:09,618 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:29:09,618 INFO L688 BuchiCegarLoop]: Abstraction has 1122011 states and 2093051 transitions. [2019-12-07 18:29:10,099 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 1122011 states and 2093051 transitions. [2019-12-07 18:29:13,527 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 1122011 to 294899. [2019-12-07 18:29:13,527 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 294899 states. [2019-12-07 18:29:13,928 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 294899 states to 294899 states and 546635 transitions. [2019-12-07 18:29:13,928 INFO L711 BuchiCegarLoop]: Abstraction has 294899 states and 546635 transitions. [2019-12-07 18:29:13,928 INFO L591 BuchiCegarLoop]: Abstraction has 294899 states and 546635 transitions. [2019-12-07 18:29:13,928 INFO L424 BuchiCegarLoop]: ======== Iteration 17============ [2019-12-07 18:29:13,928 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 294899 states and 546635 transitions. [2019-12-07 18:29:14,744 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 73804 [2019-12-07 18:29:14,744 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 18:29:14,744 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 18:29:14,746 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:29:14,747 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 18:29:14,747 INFO L794 eck$LassoCheckResult]: Stem: 4500364#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string18.base, #t~string18.offset := #Ultimate.allocOnStack(30);call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(9);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(21);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(30);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(9);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(21);call #t~string27.base, #t~string27.offset := #Ultimate.allocOnStack(30);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(9);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(25);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(30);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(9);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(25);call #t~string102.base, #t~string102.offset := #Ultimate.allocOnStack(10);call #t~string104.base, #t~string104.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string104.base, #t~string104.offset, 1);call write~init~int(95, #t~string104.base, 1 + #t~string104.offset, 1);call write~init~int(93, #t~string104.base, 2 + #t~string104.offset, 1);call write~init~int(0, #t~string104.base, 3 + #t~string104.offset, 1);call #t~string106.base, #t~string106.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string106.base, #t~string106.offset, 1);call write~init~int(93, #t~string106.base, 1 + #t~string106.offset, 1);call write~init~int(32, #t~string106.base, 2 + #t~string106.offset, 1);call write~init~int(0, #t~string106.base, 3 + #t~string106.offset, 1);call #t~string108.base, #t~string108.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string108.base, #t~string108.offset, 1);call write~init~int(97, #t~string108.base, 1 + #t~string108.offset, 1);call write~init~int(116, #t~string108.base, 2 + #t~string108.offset, 1);call write~init~int(32, #t~string108.base, 3 + #t~string108.offset, 1);call write~init~int(0, #t~string108.base, 4 + #t~string108.offset, 1);call #t~string110.base, #t~string110.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string110.base, #t~string110.offset, 1);call write~init~int(105, #t~string110.base, 1 + #t~string110.offset, 1);call write~init~int(0, #t~string110.base, 2 + #t~string110.offset, 1);call #t~string112.base, #t~string112.offset := #Ultimate.allocOnStack(10);call #t~string114.base, #t~string114.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string114.base, #t~string114.offset, 1);call write~init~int(112, #t~string114.base, 1 + #t~string114.offset, 1);call write~init~int(0, #t~string114.base, 2 + #t~string114.offset, 1);call #t~string116.base, #t~string116.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string116.base, #t~string116.offset, 1);call write~init~int(111, #t~string116.base, 1 + #t~string116.offset, 1);call write~init~int(119, #t~string116.base, 2 + #t~string116.offset, 1);call write~init~int(110, #t~string116.base, 3 + #t~string116.offset, 1);call write~init~int(0, #t~string116.base, 4 + #t~string116.offset, 1);call #t~string118.base, #t~string118.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string118.base, #t~string118.offset, 1);call write~init~int(73, #t~string118.base, 1 + #t~string118.offset, 1);call write~init~int(76, #t~string118.base, 2 + #t~string118.offset, 1);call write~init~int(95, #t~string118.base, 3 + #t~string118.offset, 1);call write~init~int(112, #t~string118.base, 4 + #t~string118.offset, 1);call write~init~int(58, #t~string118.base, 5 + #t~string118.offset, 1);call write~init~int(0, #t~string118.base, 6 + #t~string118.offset, 1);call #t~string120.base, #t~string120.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string120.base, #t~string120.offset, 1);call write~init~int(37, #t~string120.base, 1 + #t~string120.offset, 1);call write~init~int(105, #t~string120.base, 2 + #t~string120.offset, 1);call write~init~int(0, #t~string120.base, 3 + #t~string120.offset, 1);call #t~string122.base, #t~string122.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string122.base, #t~string122.offset, 1);call write~init~int(37, #t~string122.base, 1 + #t~string122.offset, 1);call write~init~int(105, #t~string122.base, 2 + #t~string122.offset, 1);call write~init~int(0, #t~string122.base, 3 + #t~string122.offset, 1);call #t~string124.base, #t~string124.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string124.base, #t~string124.offset, 1);call write~init~int(37, #t~string124.base, 1 + #t~string124.offset, 1);call write~init~int(105, #t~string124.base, 2 + #t~string124.offset, 1);call write~init~int(0, #t~string124.base, 3 + #t~string124.offset, 1);call #t~string126.base, #t~string126.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string126.base, #t~string126.offset, 1);call write~init~int(37, #t~string126.base, 1 + #t~string126.offset, 1);call write~init~int(105, #t~string126.base, 2 + #t~string126.offset, 1);call write~init~int(0, #t~string126.base, 3 + #t~string126.offset, 1);call #t~string128.base, #t~string128.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string128.base, #t~string128.offset, 1);call write~init~int(37, #t~string128.base, 1 + #t~string128.offset, 1);call write~init~int(105, #t~string128.base, 2 + #t~string128.offset, 1);call write~init~int(0, #t~string128.base, 3 + #t~string128.offset, 1);call #t~string130.base, #t~string130.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string130.base, #t~string130.offset, 1);call write~init~int(70, #t~string130.base, 1 + #t~string130.offset, 1);call write~init~int(95, #t~string130.base, 2 + #t~string130.offset, 1);call write~init~int(112, #t~string130.base, 3 + #t~string130.offset, 1);call write~init~int(58, #t~string130.base, 4 + #t~string130.offset, 1);call write~init~int(0, #t~string130.base, 5 + #t~string130.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string133.base, #t~string133.offset, 1);call write~init~int(37, #t~string133.base, 1 + #t~string133.offset, 1);call write~init~int(105, #t~string133.base, 2 + #t~string133.offset, 1);call write~init~int(0, #t~string133.base, 3 + #t~string133.offset, 1);call #t~string136.base, #t~string136.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string136.base, #t~string136.offset, 1);call write~init~int(37, #t~string136.base, 1 + #t~string136.offset, 1);call write~init~int(105, #t~string136.base, 2 + #t~string136.offset, 1);call write~init~int(0, #t~string136.base, 3 + #t~string136.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(37, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(105, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 3 + #t~string139.offset, 1);call #t~string142.base, #t~string142.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string142.base, #t~string142.offset, 1);call write~init~int(37, #t~string142.base, 1 + #t~string142.offset, 1);call write~init~int(105, #t~string142.base, 2 + #t~string142.offset, 1);call write~init~int(0, #t~string142.base, 3 + #t~string142.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string147.base, #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 1 + #t~string147.offset, 1);~head~0.base, ~head~0.offset := 0, 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~cleanupTimeShifts~0 := 12;~weight~0 := 0;~maximumWeight~0 := 100;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~expectedDirection~0 := 0; 4500365#L-1 havoc main_#res;havoc main_#t~ret49, main_~retValue_acc~9, main_~tmp~11;havoc main_~retValue_acc~9;havoc main_~tmp~11; 4499090#L1098 havoc valid_product_#res;havoc valid_product_~retValue_acc~7;havoc valid_product_~retValue_acc~7;valid_product_~retValue_acc~7 := 1;valid_product_#res := valid_product_~retValue_acc~7; 4498507#L1106 main_#t~ret49 := valid_product_#res;main_~tmp~11 := main_#t~ret49;havoc main_#t~ret49; 4498508#L1462 assume 0 != main_~tmp~11; 4499858#L1438 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 4498685#L487 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 4498686#L3282 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4498362#L3307 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4498363#L765 assume 0 == initPersonOnFloor_~floor; 4496954#L766 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4495620#L873-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4497478#L557 assume !(0 == callOnFloor_~floorID); 4500944#L560 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4499098#L569-2 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4515484#L1832 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4515483#L1884 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4515482#L3076 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4515481#L3138 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4499163#L3148 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4495758#L3159 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4497346#L3170 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4501163#L3181 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4502066#L3182 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4515786#L494 assume !(0 == isFloorCalling_~floorID); 4515785#L498 assume !(1 == isFloorCalling_~floorID); 4515784#L502 assume !(2 == isFloorCalling_~floorID); 4515782#L506 assume 3 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_3~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4515781#L521 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4515780#L2445 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4515779#L1849-10 assume !(0 == buttonForFloorIsPressed_~floorID); 4515778#L1853-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4515774#L1870-10 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4515773#L2452 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4515772#L2457 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4515771#L2596 assume !(0 != timeShift_~tmp___9~2); 4515770#L2687 assume !(1 == ~doorState~0); 4515769#L2687-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4515768#L2036 assume !(1 == stopRequestedInDirection_~dir); 4515766#L2205 assume !(0 == ~currentFloorID~0); 4515761#L2211 assume ~currentFloorID~0 > 0; 4515753#L2212 assume 0 != stopRequestedInDirection_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4515744#L494-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4515731#L521-6 stopRequestedInDirection_#t~ret71 := isFloorCalling_#res;stopRequestedInDirection_~tmp___9~0 := stopRequestedInDirection_#t~ret71;havoc stopRequestedInDirection_#t~ret71; 4515719#L2216 assume 0 != stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~retValue_acc~18 := 1;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4515706#L2358 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4515704#L2695 assume 0 != timeShift_~tmp___8~2;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4515703#L2412 assume !(1 == ~currentHeading~0); 4515702#L2422 assume !(0 == ~currentFloorID~0); 4515700#L2422-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 4515701#L2428-5 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4576484#L3207 assume !(-1 == ~expectedDirection~0); 4576482#L3219 assume !(1 == ~expectedDirection~0); 4576479#L3220 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4576478#L1832-1 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4576477#L1884-3 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4576476#L3076-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4512308#L3138-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4514758#L3148-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4514760#L3159-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4514729#L3170-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4514731#L3181-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4514705#L3182-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4514706#L494-21 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4514048#L521-21 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4514047#L2445-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4514042#L1849-21 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4514041#L1870-21 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4514039#L2452-1 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4514038#L2457-1 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4514036#L2596-1 assume !(0 != timeShift_~tmp___9~2); 4514032#L2687-3 assume !(1 == ~doorState~0); 4514022#L2687-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4514017#L2036-2 assume !(1 == stopRequestedInDirection_~dir); 4514013#L2205-2 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4513999#L2358-2 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4513991#L2695-1 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4513989#L2467-2 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4513988#L2472-2 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4513986#L2036-3 assume !(1 == stopRequestedInDirection_~dir); 4513971#L2205-3 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4513965#L2358-3 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4513962#L2704-1 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4512618#L2412-5 assume !(1 == ~currentHeading~0); 4512615#L2422-15 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4512067#L2422-17 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4512060#L2428-11 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4512039#L3207-1 assume !(-1 == ~expectedDirection~0); 4512040#L3219-1 assume !(1 == ~expectedDirection~0); 4508812#L3220-1 havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4508813#L1832-2 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4508527#L1884-6 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4508528#L3076-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4574327#L3138-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4595683#L3148-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4595676#L3159-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4595672#L3170-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4595668#L3181-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4595666#L3182-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4595664#L494-42 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4506623#L521-42 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4506622#L2445-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4506607#L1849-32 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4506603#L1870-32 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4506601#L2452-2 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4506600#L2457-2 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4506580#L2596-2 assume !(0 != timeShift_~tmp___9~2); 4506574#L2687-6 assume 1 == ~doorState~0;~doorState~0 := 0; 4506561#L2687-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4506557#L2036-4 assume !(1 == stopRequestedInDirection_~dir); 4506556#L2205-4 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4506543#L2358-4 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4506535#L2695-2 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4506533#L2467-4 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4506532#L2472-4 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4506530#L2036-5 assume !(1 == stopRequestedInDirection_~dir); 4506529#L2205-5 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4506510#L2358-5 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4506509#L2704-2 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4503121#L2412-8 assume !(1 == ~currentHeading~0); 4503120#L2422-24 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4503110#L2422-26 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4503099#L2428-17 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4503097#L3207-2 assume !(-1 == ~expectedDirection~0); 4503068#L3219-2 assume !(1 == ~expectedDirection~0); 4503064#L3220-2 havoc bobCall_#t~ret37, bobCall_~tmp~3;havoc bobCall_~tmp~3;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~24;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~24; 4503056#L3282-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~24 := 4;getOrigin_#res := getOrigin_~retValue_acc~24; 4503053#L3307-1 bobCall_#t~ret37 := getOrigin_#res;bobCall_~tmp~3 := bobCall_#t~ret37;havoc bobCall_#t~ret37;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~3;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 4503051#L765-1 assume 0 == initPersonOnFloor_~floor; 4503052#L766-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4502978#L873-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 4502979#L557-2 assume !(0 == callOnFloor_~floorID); 4556731#L560-2 assume 1 == callOnFloor_~floorID;~calls_1~0 := 1; 4502960#L569-5 havoc cleanup_#t~ret43, cleanup_#t~ret44, cleanup_~i~0, cleanup_~tmp~9, cleanup_~tmp___0~0, cleanup_~__cil_tmp4~2;havoc cleanup_~i~0;havoc cleanup_~tmp~9;havoc cleanup_~tmp___0~0;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4502961#L1832-3 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4502952#L1884-9 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4502953#L3076-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4580453#L3138-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4605960#L3148-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4605962#L3159-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4644278#L3170-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4644275#L3181-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4644274#L3182-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4644262#L494-63 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4533511#L521-63 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4533499#L2445-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4533476#L1849-43 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4533461#L1870-43 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4533447#L2452-3 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4533439#L2457-3 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4533415#L2596-3 assume !(0 != timeShift_~tmp___9~2); 4533414#L2687-9 assume !(1 == ~doorState~0); 4533276#L2687-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4502570#L2036-6 assume !(1 == stopRequestedInDirection_~dir); 4502571#L2205-6 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4563902#L2358-6 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4563901#L2695-3 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4563899#L2467-6 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4563898#L2472-6 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4532812#L2036-7 assume !(1 == stopRequestedInDirection_~dir); 4532813#L2205-7 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4563886#L2358-7 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4563885#L2704-3 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4531758#L2412-11 assume !(1 == ~currentHeading~0); 4531757#L2422-33 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4529689#L2422-35 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4529680#L2428-23 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4529678#L3207-3 assume !(-1 == ~expectedDirection~0); 4517175#L3219-3 assume !(1 == ~expectedDirection~0); 4517040#L3220-3 cleanup_~i~0 := 0; 4516621#L1268-2 [2019-12-07 18:29:14,747 INFO L796 eck$LassoCheckResult]: Loop: 4516621#L1268-2 assume !false; 4516622#L1269 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 4516188#L1272 assume cleanup_~i~0 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~10;havoc isBlocked_~retValue_acc~10;isBlocked_~retValue_acc~10 := 0;isBlocked_#res := isBlocked_~retValue_acc~10; 4516189#L1659 cleanup_#t~ret43 := isBlocked_#res;cleanup_~tmp___0~0 := cleanup_#t~ret43;havoc cleanup_#t~ret43; 4515988#L1276 assume 1 != cleanup_~tmp___0~0; 4515989#L1276-1 havoc isIdle_#res;havoc isIdle_#t~ret64, isIdle_~retValue_acc~17, isIdle_~tmp~18;havoc isIdle_~retValue_acc~17;havoc isIdle_~tmp~18;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret59, anyStopRequested_#t~ret60, anyStopRequested_#t~ret61, anyStopRequested_#t~ret62, anyStopRequested_#t~ret63, anyStopRequested_~retValue_acc~16, anyStopRequested_~tmp~17, anyStopRequested_~tmp___0~4, anyStopRequested_~tmp___1~3, anyStopRequested_~tmp___2~1, anyStopRequested_~tmp___3~0;havoc anyStopRequested_~retValue_acc~16;havoc anyStopRequested_~tmp~17;havoc anyStopRequested_~tmp___0~4;havoc anyStopRequested_~tmp___1~3;havoc anyStopRequested_~tmp___2~1;havoc anyStopRequested_~tmp___3~0;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4515609#L494-84 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4515610#L521-84 anyStopRequested_#t~ret59 := isFloorCalling_#res;anyStopRequested_~tmp___3~0 := anyStopRequested_#t~ret59;havoc anyStopRequested_#t~ret59; 4515261#L1940 assume !(0 != anyStopRequested_~tmp___3~0); 4515263#L1944 assume !(0 != ~floorButtons_0~0);isFloorCalling_#in~floorID := 1;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4515240#L494-85 assume !(0 == isFloorCalling_~floorID); 4515241#L498-85 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4514829#L521-85 anyStopRequested_#t~ret60 := isFloorCalling_#res;anyStopRequested_~tmp___2~1 := anyStopRequested_#t~ret60;havoc anyStopRequested_#t~ret60; 4514830#L1951 assume 0 != anyStopRequested_~tmp___2~1;anyStopRequested_~retValue_acc~16 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~16; 4514723#L2004 isIdle_#t~ret64 := anyStopRequested_#res;isIdle_~tmp~18 := isIdle_#t~ret64;havoc isIdle_#t~ret64;isIdle_~retValue_acc~17 := (if 0 == isIdle_~tmp~18 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~17; 4514724#L2017 cleanup_#t~ret44 := isIdle_#res;cleanup_~tmp~9 := cleanup_#t~ret44;havoc cleanup_#t~ret44; 4514430#L1288 assume !(0 != cleanup_~tmp~9);havoc timeShift_#t~ret91, timeShift_#t~ret92, timeShift_#t~ret93, timeShift_#t~ret94, timeShift_#t~ret95, timeShift_#t~ret96, timeShift_#t~ret97, timeShift_#t~ret98, timeShift_#t~ret99, timeShift_#t~ret100, timeShift_#t~ret101, timeShift_~tmp~23, timeShift_~tmp___0~8, timeShift_~tmp___1~6, timeShift_~tmp___2~4, timeShift_~tmp___3~3, timeShift_~tmp___4~2, timeShift_~tmp___5~2, timeShift_~tmp___6~2, timeShift_~tmp___7~2, timeShift_~tmp___8~2, timeShift_~tmp___9~2;havoc timeShift_~tmp~23;havoc timeShift_~tmp___0~8;havoc timeShift_~tmp___1~6;havoc timeShift_~tmp___2~4;havoc timeShift_~tmp___3~3;havoc timeShift_~tmp___4~2;havoc timeShift_~tmp___5~2;havoc timeShift_~tmp___6~2;havoc timeShift_~tmp___7~2;havoc timeShift_~tmp___8~2;havoc timeShift_~tmp___9~2;havoc __utac_acc__Specification3_spec__1_#t~ret149, __utac_acc__Specification3_spec__1_#t~ret150, __utac_acc__Specification3_spec__1_#t~ret151, __utac_acc__Specification3_spec__1_#t~ret152, __utac_acc__Specification3_spec__1_#t~ret153, __utac_acc__Specification3_spec__1_#t~ret154, __utac_acc__Specification3_spec__1_#t~ret155, __utac_acc__Specification3_spec__1_#t~ret156, __utac_acc__Specification3_spec__1_#t~ret157, __utac_acc__Specification3_spec__1_#t~ret158, __utac_acc__Specification3_spec__1_#t~ret159, __utac_acc__Specification3_spec__1_#t~ret160, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~25, __utac_acc__Specification3_spec__1_~tmp___0~10, __utac_acc__Specification3_spec__1_~tmp___1~8, __utac_acc__Specification3_spec__1_~tmp___2~6, __utac_acc__Specification3_spec__1_~tmp___3~5, __utac_acc__Specification3_spec__1_~tmp___4~3, __utac_acc__Specification3_spec__1_~tmp___5~3, __utac_acc__Specification3_spec__1_~tmp___6~3, __utac_acc__Specification3_spec__1_~tmp___7~3, __utac_acc__Specification3_spec__1_~tmp___8~3, __utac_acc__Specification3_spec__1_~tmp___9~3, __utac_acc__Specification3_spec__1_~tmp___10~1;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~25;havoc __utac_acc__Specification3_spec__1_~tmp___0~10;havoc __utac_acc__Specification3_spec__1_~tmp___1~8;havoc __utac_acc__Specification3_spec__1_~tmp___2~6;havoc __utac_acc__Specification3_spec__1_~tmp___3~5;havoc __utac_acc__Specification3_spec__1_~tmp___4~3;havoc __utac_acc__Specification3_spec__1_~tmp___5~3;havoc __utac_acc__Specification3_spec__1_~tmp___6~3;havoc __utac_acc__Specification3_spec__1_~tmp___7~3;havoc __utac_acc__Specification3_spec__1_~tmp___8~3;havoc __utac_acc__Specification3_spec__1_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_~tmp___10~1;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~11;havoc getCurrentFloorID_~retValue_acc~11;getCurrentFloorID_~retValue_acc~11 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~11; 4514431#L1832-4 __utac_acc__Specification3_spec__1_#t~ret149 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~25 := __utac_acc__Specification3_spec__1_#t~ret149;havoc __utac_acc__Specification3_spec__1_#t~ret149;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~25;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~14;havoc getCurrentHeading_~retValue_acc~14;getCurrentHeading_~retValue_acc~14 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~14; 4514419#L1884-12 __utac_acc__Specification3_spec__1_#t~ret150 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~1 := __utac_acc__Specification3_spec__1_#t~ret150;havoc __utac_acc__Specification3_spec__1_#t~ret150; 4514420#L3076-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~1); 4605746#L3138-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 4644178#L3148-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 4644175#L3159-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 4644176#L3170-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 4705852#L3181-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 4705848#L3182-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret77, stopRequestedAtCurrentFloor_#t~ret78, stopRequestedAtCurrentFloor_~retValue_acc~20, stopRequestedAtCurrentFloor_~tmp~21, stopRequestedAtCurrentFloor_~tmp___0~6;havoc stopRequestedAtCurrentFloor_~retValue_acc~20;havoc stopRequestedAtCurrentFloor_~tmp~21;havoc stopRequestedAtCurrentFloor_~tmp___0~6;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~3;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~3; 4705845#L494-89 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~3 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~3; 4523992#L521-89 stopRequestedAtCurrentFloor_#t~ret77 := isFloorCalling_#res;stopRequestedAtCurrentFloor_~tmp___0~6 := stopRequestedAtCurrentFloor_#t~ret77;havoc stopRequestedAtCurrentFloor_#t~ret77; 4523990#L2445-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp___0~6);buttonForFloorIsPressed_#in~floorID := ~currentFloorID~0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~13;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~13; 4523901#L1849-54 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~13 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~13; 4523895#L1870-54 stopRequestedAtCurrentFloor_#t~ret78 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp~21 := stopRequestedAtCurrentFloor_#t~ret78;havoc stopRequestedAtCurrentFloor_#t~ret78; 4523893#L2452-4 assume !(0 != stopRequestedAtCurrentFloor_~tmp~21);stopRequestedAtCurrentFloor_~retValue_acc~20 := 0;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~20; 4523885#L2457-4 timeShift_#t~ret91 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~2 := timeShift_#t~ret91;havoc timeShift_#t~ret91; 4523882#L2596-4 assume !(0 != timeShift_~tmp___9~2); 4523863#L2687-12 assume 1 == ~doorState~0;~doorState~0 := 0; 4523856#L2687-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4523855#L2036-8 assume !(1 == stopRequestedInDirection_~dir); 4523854#L2205-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4523827#L2358-8 timeShift_#t~ret98 := stopRequestedInDirection_#res;timeShift_~tmp___8~2 := timeShift_#t~ret98;havoc timeShift_#t~ret98; 4523824#L2695-4 assume !(0 != timeShift_~tmp___8~2);getReverseHeading_#in~ofHeading := ~currentHeading~0;havoc getReverseHeading_#res;havoc getReverseHeading_~ofHeading, getReverseHeading_~retValue_acc~21;getReverseHeading_~ofHeading := getReverseHeading_#in~ofHeading;havoc getReverseHeading_~retValue_acc~21; 4523822#L2467-8 assume !(0 == getReverseHeading_~ofHeading);getReverseHeading_~retValue_acc~21 := 0;getReverseHeading_#res := getReverseHeading_~retValue_acc~21; 4523821#L2472-8 timeShift_#t~ret99 := getReverseHeading_#res;timeShift_~tmp___6~2 := timeShift_#t~ret99;havoc timeShift_#t~ret99;stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := timeShift_~tmp___6~2, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret65, stopRequestedInDirection_#t~ret66, stopRequestedInDirection_#t~ret67, stopRequestedInDirection_#t~ret68, stopRequestedInDirection_#t~ret69, stopRequestedInDirection_#t~ret70, stopRequestedInDirection_#t~ret71, stopRequestedInDirection_#t~ret72, stopRequestedInDirection_#t~ret73, stopRequestedInDirection_#t~ret74, stopRequestedInDirection_#t~ret75, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~18, stopRequestedInDirection_~tmp~19, stopRequestedInDirection_~tmp___0~5, stopRequestedInDirection_~tmp___1~4, stopRequestedInDirection_~tmp___2~2, stopRequestedInDirection_~tmp___3~1, stopRequestedInDirection_~tmp___4~0, stopRequestedInDirection_~tmp___5~0, stopRequestedInDirection_~tmp___6~0, stopRequestedInDirection_~tmp___7~0, stopRequestedInDirection_~tmp___8~0, stopRequestedInDirection_~tmp___9~0;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~18;havoc stopRequestedInDirection_~tmp~19;havoc stopRequestedInDirection_~tmp___0~5;havoc stopRequestedInDirection_~tmp___1~4;havoc stopRequestedInDirection_~tmp___2~2;havoc stopRequestedInDirection_~tmp___3~1;havoc stopRequestedInDirection_~tmp___4~0;havoc stopRequestedInDirection_~tmp___5~0;havoc stopRequestedInDirection_~tmp___6~0;havoc stopRequestedInDirection_~tmp___7~0;havoc stopRequestedInDirection_~tmp___8~0;havoc stopRequestedInDirection_~tmp___9~0; 4517217#L2036-9 assume !(1 == stopRequestedInDirection_~dir); 4517218#L2205-9 assume 0 == ~currentFloorID~0;stopRequestedInDirection_~retValue_acc~18 := 0;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~18; 4523809#L2358-9 timeShift_#t~ret100 := stopRequestedInDirection_#res;timeShift_~tmp___7~2 := timeShift_#t~ret100;havoc timeShift_#t~ret100; 4523808#L2704-4 assume !(0 != timeShift_~tmp___7~2);continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret76, continueInDirection_~dir, continueInDirection_~tmp~20;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~20;~currentHeading~0 := continueInDirection_~dir; 4517089#L2412-14 assume !(1 == ~currentHeading~0); 4517085#L2422-42 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 4517077#L2422-44 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 4517069#L2428-29 havoc __utac_acc__Specification3_spec__2_#t~ret161, __utac_acc__Specification3_spec__2_#t~ret162, __utac_acc__Specification3_spec__2_~tmp~26, __utac_acc__Specification3_spec__2_~tmp___0~11;havoc __utac_acc__Specification3_spec__2_~tmp~26;havoc __utac_acc__Specification3_spec__2_~tmp___0~11; 4517070#L3207-4 assume !(-1 == ~expectedDirection~0); 4517059#L3219-4 assume !(1 == ~expectedDirection~0); 4517034#L3220-4 cleanup_~i~0 := 1 + cleanup_~i~0; 4516621#L1268-2 [2019-12-07 18:29:14,747 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:29:14,747 INFO L82 PathProgramCache]: Analyzing trace with hash -2030945058, now seen corresponding path program 2 times [2019-12-07 18:29:14,748 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:29:14,748 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2016974665] [2019-12-07 18:29:14,748 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:29:14,758 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:29:14,787 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:29:14,787 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2016974665] [2019-12-07 18:29:14,787 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 18:29:14,787 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 18:29:14,787 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1049532911] [2019-12-07 18:29:14,788 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 18:29:14,788 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:29:14,788 INFO L82 PathProgramCache]: Analyzing trace with hash -1007986394, now seen corresponding path program 1 times [2019-12-07 18:29:14,788 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 18:29:14,788 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [642848965] [2019-12-07 18:29:14,788 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 18:29:14,793 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 18:29:14,798 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 18:29:14,831 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 18:29:15,444 WARN L192 SmtUtils]: Spent 608.00 ms on a formula simplification. DAG size of input: 207 DAG size of output: 170 [2019-12-07 18:29:15,959 WARN L192 SmtUtils]: Spent 503.00 ms on a formula simplification. DAG size of input: 139 DAG size of output: 134 [2019-12-07 18:29:15,968 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 18:29:15,968 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 18:29:15,969 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 18:29:15,969 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 18:29:15,969 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 18:29:15,969 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:15,969 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 18:29:15,969 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 18:29:15,969 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product25.cil.c_Iteration17_Loop [2019-12-07 18:29:15,969 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 18:29:15,969 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 18:29:15,991 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,011 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,016 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,017 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,018 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,020 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,022 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,023 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,028 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,029 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,030 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,032 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,033 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,034 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,037 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,039 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,041 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,044 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,049 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,051 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,052 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,056 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,058 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,059 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,060 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,061 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,063 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,067 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,069 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,070 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,071 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,075 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,076 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,077 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,079 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,085 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,087 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,089 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,092 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,094 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,095 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,096 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,098 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,099 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,100 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,102 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,103 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,104 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,105 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,107 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,111 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,113 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,114 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,115 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,117 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,123 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,124 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,125 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,126 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,128 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,129 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,133 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,135 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,136 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,138 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,139 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,140 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,142 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,143 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,144 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,155 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,157 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,158 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,159 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,160 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,161 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,162 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,163 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,165 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,166 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,167 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,171 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,174 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,175 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,177 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,179 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,181 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,183 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,185 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,186 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,188 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,193 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,195 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,196 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,197 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,199 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,200 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,201 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,202 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,204 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,205 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,209 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:16,604 WARN L192 SmtUtils]: Spent 150.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2019-12-07 18:29:16,803 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 18:29:16,803 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:16,808 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 18:29:16,808 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:16,824 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 18:29:16,824 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 18:29:20,221 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 18:29:20,224 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 18:29:20,224 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 18:29:20,224 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 18:29:20,224 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 18:29:20,224 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 18:29:20,224 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:20,225 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 18:29:20,225 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 18:29:20,225 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product25.cil.c_Iteration17_Loop [2019-12-07 18:29:20,225 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 18:29:20,225 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 18:29:20,228 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,233 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,235 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,237 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,238 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,252 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,253 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,255 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,260 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,262 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,263 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,264 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,265 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,267 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,268 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,270 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,291 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,297 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,298 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,299 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,301 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,305 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,308 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,311 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,319 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,321 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,325 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,340 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,345 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,346 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,348 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,349 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,352 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,353 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,367 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,371 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,372 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,374 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,375 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,376 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,391 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,392 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,394 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,396 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,397 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,403 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,407 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,410 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,411 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,412 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,414 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,415 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,416 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,417 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,418 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,422 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,426 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,427 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,430 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,431 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,432 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,434 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,435 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,436 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,437 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 18:29:20,835 WARN L192 SmtUtils]: Spent 149.00 ms on a formula simplification. DAG size of input: 40 DAG size of output: 34 [2019-12-07 18:29:21,035 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 18:29:21,038 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,318 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,319 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,319 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,320 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,320 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,320 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,322 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,322 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,324 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,329 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,330 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,330 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,330 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,330 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,330 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,330 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,331 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,332 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,335 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,336 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,336 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,336 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,336 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,336 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,337 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,337 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,338 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,342 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,343 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,343 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,344 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,344 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,344 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,344 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,344 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,345 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,350 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,351 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,351 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,352 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,352 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 18:29:21,352 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,357 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 18:29:21,357 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,362 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,367 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,368 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,368 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,368 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,368 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,368 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,368 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,368 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,370 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,374 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,375 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,375 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,375 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,375 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,375 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,375 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,376 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,377 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,380 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 18:29:21,381 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 18:29:21,382 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 18:29:21,382 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 18:29:21,382 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 18:29:21,382 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 18:29:21,383 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 18:29:21,383 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 18:29:21,385 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 18:29:21,392 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-12-07 18:29:21,392 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_6bde3cad-e55c-4c1f-987a-befc1b157bf1/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 18:29:21,396 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 18:29:21,396 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 18:29:21,397 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 18:29:21,397 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~0) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~0 Supporting invariants [] [2019-12-07 18:29:21,400 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 18:29:21,420 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 18:29:21,601 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:29:21,605 INFO L264 TraceCheckSpWp]: Trace formula consists of 1169 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 18:29:21,611 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 18:29:21,662 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 18:29:21,663 INFO L264 TraceCheckSpWp]: Trace formula consists of 196 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 18:29:21,665 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 18:29:21,699 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 18:29:21,704 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2019-12-07 18:29:21,704 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 294899 states and 546635 transitions. cyclomatic complexity: 251737 Second operand 5 states. [2019-12-07 18:29:23,146 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 294899 states and 546635 transitions. cyclomatic complexity: 251737. Second operand 5 states. Result 368703 states and 683011 transitions. Complement of second has 8 states. [2019-12-07 18:29:23,146 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-12-07 18:29:23,146 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-12-07 18:29:23,156 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 11196 transitions. [2019-12-07 18:29:23,157 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11196 transitions. Stem has 170 letters. Loop has 53 letters. [2019-12-07 18:29:23,159 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 18:29:23,159 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11196 transitions. Stem has 223 letters. Loop has 53 letters. [2019-12-07 18:29:23,161 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 18:29:23,161 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 11196 transitions. Stem has 170 letters. Loop has 106 letters. [2019-12-07 18:29:23,162 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 18:29:23,162 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 368703 states and 683011 transitions. [2019-12-07 18:29:24,628 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 18:29:24,628 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 368703 states to 0 states and 0 transitions. [2019-12-07 18:29:24,628 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 18:29:24,628 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 18:29:24,629 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 18:29:24,629 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:29:24,629 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 18:29:24,629 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 18:29:24,629 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 18:29:24,629 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 18:29:24,629 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 18:29:24,629 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2019-12-07 18:29:24,629 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 18:29:24,629 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-12-07 18:29:24,629 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 18:29:24,629 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-12-07 18:29:24,629 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 18:29:24,629 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 18:29:24,629 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 18:29:24,630 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 18:29:24,630 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 18:29:24,630 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 18:29:24,630 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 18:29:24,630 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 18:29:24,630 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 18:29:24,630 INFO L424 BuchiCegarLoop]: ======== Iteration 18============ [2019-12-07 18:29:24,630 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-12-07 18:29:24,630 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 18:29:24,630 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-12-07 18:29:24,634 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 07.12 06:29:24 BoogieIcfgContainer [2019-12-07 18:29:24,634 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-12-07 18:29:24,634 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 18:29:24,634 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 18:29:24,634 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 18:29:24,635 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 06:27:32" (3/4) ... [2019-12-07 18:29:24,637 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-12-07 18:29:24,637 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 18:29:24,638 INFO L168 Benchmark]: Toolchain (without parser) took 120760.17 ms. Allocated memory was 1.0 GB in the beginning and 9.0 GB in the end (delta: 7.9 GB). Free memory was 938.0 MB in the beginning and 3.6 GB in the end (delta: -2.6 GB). Peak memory consumption was 5.3 GB. Max. memory is 11.5 GB. [2019-12-07 18:29:24,638 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 18:29:24,638 INFO L168 Benchmark]: CACSL2BoogieTranslator took 471.45 ms. Allocated memory is still 1.0 GB. Free memory was 938.0 MB in the beginning and 969.2 MB in the end (delta: -31.2 MB). Peak memory consumption was 28.8 MB. Max. memory is 11.5 GB. [2019-12-07 18:29:24,638 INFO L168 Benchmark]: Boogie Procedure Inliner took 214.39 ms. Allocated memory is still 1.0 GB. Free memory was 969.2 MB in the beginning and 903.7 MB in the end (delta: 65.5 MB). Peak memory consumption was 65.5 MB. Max. memory is 11.5 GB. [2019-12-07 18:29:24,639 INFO L168 Benchmark]: Boogie Preprocessor took 266.41 ms. Allocated memory is still 1.0 GB. Free memory was 903.7 MB in the beginning and 843.5 MB in the end (delta: 60.1 MB). Peak memory consumption was 60.1 MB. Max. memory is 11.5 GB. [2019-12-07 18:29:24,639 INFO L168 Benchmark]: RCFGBuilder took 7773.47 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 469.8 MB). Free memory was 843.5 MB in the beginning and 1.3 GB in the end (delta: -483.1 MB). Peak memory consumption was 629.8 MB. Max. memory is 11.5 GB. [2019-12-07 18:29:24,639 INFO L168 Benchmark]: BuchiAutomizer took 112028.81 ms. Allocated memory was 1.5 GB in the beginning and 9.0 GB in the end (delta: 7.5 GB). Free memory was 1.3 GB in the beginning and 3.6 GB in the end (delta: -2.2 GB). Peak memory consumption was 5.2 GB. Max. memory is 11.5 GB. [2019-12-07 18:29:24,639 INFO L168 Benchmark]: Witness Printer took 2.69 ms. Allocated memory is still 9.0 GB. Free memory is still 3.6 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 18:29:24,641 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 958.6 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 471.45 ms. Allocated memory is still 1.0 GB. Free memory was 938.0 MB in the beginning and 969.2 MB in the end (delta: -31.2 MB). Peak memory consumption was 28.8 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 214.39 ms. Allocated memory is still 1.0 GB. Free memory was 969.2 MB in the beginning and 903.7 MB in the end (delta: 65.5 MB). Peak memory consumption was 65.5 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 266.41 ms. Allocated memory is still 1.0 GB. Free memory was 903.7 MB in the beginning and 843.5 MB in the end (delta: 60.1 MB). Peak memory consumption was 60.1 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7773.47 ms. Allocated memory was 1.0 GB in the beginning and 1.5 GB in the end (delta: 469.8 MB). Free memory was 843.5 MB in the beginning and 1.3 GB in the end (delta: -483.1 MB). Peak memory consumption was 629.8 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 112028.81 ms. Allocated memory was 1.5 GB in the beginning and 9.0 GB in the end (delta: 7.5 GB). Free memory was 1.3 GB in the beginning and 3.6 GB in the end (delta: -2.2 GB). Peak memory consumption was 5.2 GB. Max. memory is 11.5 GB. * Witness Printer took 2.69 ms. Allocated memory is still 9.0 GB. Free memory is still 3.6 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 18 terminating modules (17 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 17 modules have a trivial ranking function, the largest among these consists of 7 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 112.0s and 18 iterations. TraceHistogramMax:1. Analysis of lassos took 8.1s. Construction of modules took 26.0s. Büchi inclusion checks took 21.6s. Highest rank in rank-based complementation 3. Minimization of det autom 18. Minimization of nondet autom 0. Automata minimization 23.8s AutomataMinimizationTime, 16 MinimizatonAttempts, 1411995 StatesRemovedByMinimization, 15 NontrivialMinimizations. Non-live state removal took 25.5s Buchi closure took 1.6s. Biggest automaton had 294899 states and ocurred in iteration 16. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 324720 SDtfs, 652183 SDslu, 547609 SDs, 0 SdLazy, 32856 SolverSat, 3748 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 26.0s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI16 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital197 mio100 ax100 hnf100 lsp17 ukn100 mio100 lsp100 div100 bol100 ite100 ukn100 eq217 hnf89 smp100 dnf348 smp46 tf101 neg98 sie103 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 15ms VariablesStem: 0 VariablesLoop: 9 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 0 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 3.4s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...