./Ultimate.py --spec ../../sv-benchmarks/c/properties/termination.prp --file ../../sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c --full-output --architecture 32bit -------------------------------------------------------------------------------- Checking for termination Using default analysis Version f470102c Calling Ultimate with: /usr/lib/jvm/java-8-openjdk-amd64/bin/java -Dosgi.configuration.area=/tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/data/config -Xmx12G -Xms1G -jar /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/plugins/org.eclipse.equinox.launcher_1.3.100.v20150511-1540.jar -data @noDefault -ultimatedata /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/data -tc /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/config/AutomizerTermination.xml -i ../../sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c -s /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf --cacsl2boogietranslator.entry.function main --witnessprinter.witness.directory /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer --witnessprinter.witness.filename witness.graphml --witnessprinter.write.witness.besides.input.file false --witnessprinter.graph.data.specification CHECK( init(main()), LTL(F end) ) --witnessprinter.graph.data.producer Automizer --witnessprinter.graph.data.architecture 32bit --witnessprinter.graph.data.programhash 90a1fcd73eb3b3596ff52c3c2b22ae153310fe60 ....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................... Execution finished normally Writing output log to file Ultimate.log Result: TRUE --- Real Ultimate output --- This is Ultimate 0.1.25-f470102 [2019-12-07 15:58:43,279 INFO L177 SettingsManager]: Resetting all preferences to default values... [2019-12-07 15:58:43,280 INFO L181 SettingsManager]: Resetting UltimateCore preferences to default values [2019-12-07 15:58:43,288 INFO L184 SettingsManager]: Ultimate Commandline Interface provides no preferences, ignoring... [2019-12-07 15:58:43,288 INFO L181 SettingsManager]: Resetting Boogie Preprocessor preferences to default values [2019-12-07 15:58:43,289 INFO L181 SettingsManager]: Resetting Boogie Procedure Inliner preferences to default values [2019-12-07 15:58:43,290 INFO L181 SettingsManager]: Resetting Abstract Interpretation preferences to default values [2019-12-07 15:58:43,291 INFO L181 SettingsManager]: Resetting LassoRanker preferences to default values [2019-12-07 15:58:43,293 INFO L181 SettingsManager]: Resetting Reaching Definitions preferences to default values [2019-12-07 15:58:43,293 INFO L181 SettingsManager]: Resetting SyntaxChecker preferences to default values [2019-12-07 15:58:43,294 INFO L181 SettingsManager]: Resetting Sifa preferences to default values [2019-12-07 15:58:43,295 INFO L184 SettingsManager]: Büchi Program Product provides no preferences, ignoring... [2019-12-07 15:58:43,295 INFO L181 SettingsManager]: Resetting LTL2Aut preferences to default values [2019-12-07 15:58:43,296 INFO L181 SettingsManager]: Resetting PEA to Boogie preferences to default values [2019-12-07 15:58:43,296 INFO L181 SettingsManager]: Resetting BlockEncodingV2 preferences to default values [2019-12-07 15:58:43,297 INFO L181 SettingsManager]: Resetting ChcToBoogie preferences to default values [2019-12-07 15:58:43,297 INFO L181 SettingsManager]: Resetting AutomataScriptInterpreter preferences to default values [2019-12-07 15:58:43,298 INFO L181 SettingsManager]: Resetting BuchiAutomizer preferences to default values [2019-12-07 15:58:43,300 INFO L181 SettingsManager]: Resetting CACSL2BoogieTranslator preferences to default values [2019-12-07 15:58:43,301 INFO L181 SettingsManager]: Resetting CodeCheck preferences to default values [2019-12-07 15:58:43,302 INFO L181 SettingsManager]: Resetting InvariantSynthesis preferences to default values [2019-12-07 15:58:43,303 INFO L181 SettingsManager]: Resetting RCFGBuilder preferences to default values [2019-12-07 15:58:43,304 INFO L181 SettingsManager]: Resetting Referee preferences to default values [2019-12-07 15:58:43,304 INFO L181 SettingsManager]: Resetting TraceAbstraction preferences to default values [2019-12-07 15:58:43,306 INFO L184 SettingsManager]: TraceAbstractionConcurrent provides no preferences, ignoring... [2019-12-07 15:58:43,306 INFO L184 SettingsManager]: TraceAbstractionWithAFAs provides no preferences, ignoring... [2019-12-07 15:58:43,306 INFO L181 SettingsManager]: Resetting TreeAutomizer preferences to default values [2019-12-07 15:58:43,307 INFO L181 SettingsManager]: Resetting IcfgToChc preferences to default values [2019-12-07 15:58:43,307 INFO L181 SettingsManager]: Resetting IcfgTransformer preferences to default values [2019-12-07 15:58:43,308 INFO L184 SettingsManager]: ReqToTest provides no preferences, ignoring... [2019-12-07 15:58:43,308 INFO L181 SettingsManager]: Resetting Boogie Printer preferences to default values [2019-12-07 15:58:43,308 INFO L181 SettingsManager]: Resetting ChcSmtPrinter preferences to default values [2019-12-07 15:58:43,309 INFO L181 SettingsManager]: Resetting ReqPrinter preferences to default values [2019-12-07 15:58:43,309 INFO L181 SettingsManager]: Resetting Witness Printer preferences to default values [2019-12-07 15:58:43,310 INFO L184 SettingsManager]: Boogie PL CUP Parser provides no preferences, ignoring... [2019-12-07 15:58:43,310 INFO L181 SettingsManager]: Resetting CDTParser preferences to default values [2019-12-07 15:58:43,310 INFO L184 SettingsManager]: AutomataScriptParser provides no preferences, ignoring... [2019-12-07 15:58:43,310 INFO L184 SettingsManager]: ReqParser provides no preferences, ignoring... [2019-12-07 15:58:43,311 INFO L181 SettingsManager]: Resetting SmtParser preferences to default values [2019-12-07 15:58:43,311 INFO L181 SettingsManager]: Resetting Witness Parser preferences to default values [2019-12-07 15:58:43,311 INFO L188 SettingsManager]: Finished resetting all preferences to default values... [2019-12-07 15:58:43,312 INFO L101 SettingsManager]: Beginning loading settings from /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/config/svcomp-Termination-32bit-Automizer_Default.epf [2019-12-07 15:58:43,324 INFO L113 SettingsManager]: Loading preferences was successful [2019-12-07 15:58:43,324 INFO L115 SettingsManager]: Preferences different from defaults after loading the file: [2019-12-07 15:58:43,324 INFO L136 SettingsManager]: Preferences of BlockEncodingV2 differ from their defaults: [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * Create parallel compositions if possible=false [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * Use SBE=true [2019-12-07 15:58:43,325 INFO L136 SettingsManager]: Preferences of BuchiAutomizer differ from their defaults: [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * NCSB implementation=INTSET_LAZY3 [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * Use old map elimination=false [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * Use external solver (rank synthesis)=false [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * Use only trivial implications for array writes=true [2019-12-07 15:58:43,325 INFO L138 SettingsManager]: * Rank analysis=LINEAR_WITH_GUESSES [2019-12-07 15:58:43,325 INFO L136 SettingsManager]: Preferences of CACSL2BoogieTranslator differ from their defaults: [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * sizeof long=4 [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * Check unreachability of error function in SV-COMP mode=false [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * Overapproximate operations on floating types=true [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * sizeof POINTER=4 [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * Check division by zero=IGNORE [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * Pointer to allocated memory at dereference=ASSUME [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * If two pointers are subtracted or compared they have the same base address=ASSUME [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * Check array bounds for arrays that are off heap=ASSUME [2019-12-07 15:58:43,326 INFO L138 SettingsManager]: * sizeof long double=12 [2019-12-07 15:58:43,327 INFO L138 SettingsManager]: * Check if freed pointer was valid=false [2019-12-07 15:58:43,327 INFO L138 SettingsManager]: * Assume nondeterminstic values are in range=false [2019-12-07 15:58:43,327 INFO L138 SettingsManager]: * Use constant arrays=true [2019-12-07 15:58:43,327 INFO L138 SettingsManager]: * Pointer base address is valid at dereference=ASSUME [2019-12-07 15:58:43,327 INFO L136 SettingsManager]: Preferences of RCFGBuilder differ from their defaults: [2019-12-07 15:58:43,327 INFO L138 SettingsManager]: * Size of a code block=SequenceOfStatements [2019-12-07 15:58:43,327 INFO L138 SettingsManager]: * To the following directory=/home/matthias/ultimate/dump [2019-12-07 15:58:43,327 INFO L136 SettingsManager]: Preferences of TraceAbstraction differ from their defaults: [2019-12-07 15:58:43,328 INFO L138 SettingsManager]: * Trace refinement strategy=CAMEL [2019-12-07 15:58:43,328 INFO L138 SettingsManager]: * Trace refinement exception blacklist=NONE [2019-12-07 15:58:43,328 INFO L138 SettingsManager]: * Dump automata to the following directory=/home/matthias/ultimate/dump/auto [2019-12-07 15:58:43,328 INFO L136 SettingsManager]: Preferences of IcfgTransformer differ from their defaults: [2019-12-07 15:58:43,329 INFO L138 SettingsManager]: * TransformationType=MODULO_NEIGHBOR Applying setting for plugin de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator: Entry function -> main Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness directory -> /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Witness filename -> witness.graphml Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Write witness besides input file -> false Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data specification -> CHECK( init(main()), LTL(F end) ) Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data producer -> Automizer Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data architecture -> 32bit Applying setting for plugin de.uni_freiburg.informatik.ultimate.witnessprinter: Graph data programhash -> 90a1fcd73eb3b3596ff52c3c2b22ae153310fe60 [2019-12-07 15:58:43,433 INFO L81 nceAwareModelManager]: Repository-Root is: /tmp [2019-12-07 15:58:43,443 INFO L258 ainManager$Toolchain]: [Toolchain 1]: Applicable parser(s) successfully (re)initialized [2019-12-07 15:58:43,446 INFO L214 ainManager$Toolchain]: [Toolchain 1]: Toolchain selected. [2019-12-07 15:58:43,447 INFO L271 PluginConnector]: Initializing CDTParser... [2019-12-07 15:58:43,447 INFO L275 PluginConnector]: CDTParser initialized [2019-12-07 15:58:43,448 INFO L428 ainManager$Toolchain]: [Toolchain 1]: Parsing single file: /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/../../sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c [2019-12-07 15:58:43,486 INFO L220 CDTParser]: Created temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/data/1539811f7/483fb20200a24e9f8364168400794d2d/FLAGaa43a4526 [2019-12-07 15:58:43,891 INFO L306 CDTParser]: Found 1 translation units. [2019-12-07 15:58:43,892 INFO L160 CDTParser]: Scanning /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/sv-benchmarks/c/product-lines/elevator_spec3_product29.cil.c [2019-12-07 15:58:43,905 INFO L349 CDTParser]: About to delete temporary CDT project at /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/data/1539811f7/483fb20200a24e9f8364168400794d2d/FLAGaa43a4526 [2019-12-07 15:58:43,913 INFO L357 CDTParser]: Successfully deleted /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/data/1539811f7/483fb20200a24e9f8364168400794d2d [2019-12-07 15:58:43,915 INFO L296 ainManager$Toolchain]: ####################### [Toolchain 1] ####################### [2019-12-07 15:58:43,916 INFO L131 ToolchainWalker]: Walking toolchain with 6 elements. [2019-12-07 15:58:43,916 INFO L113 PluginConnector]: ------------------------CACSL2BoogieTranslator---------------------------- [2019-12-07 15:58:43,916 INFO L271 PluginConnector]: Initializing CACSL2BoogieTranslator... [2019-12-07 15:58:43,919 INFO L275 PluginConnector]: CACSL2BoogieTranslator initialized [2019-12-07 15:58:43,919 INFO L185 PluginConnector]: Executing the observer ACSLObjectContainerObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:58:43" (1/1) ... [2019-12-07 15:58:43,921 INFO L205 PluginConnector]: Invalid model from CACSL2BoogieTranslator for observer de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator.ACSLObjectContainerObserver@1c69a469 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:43, skipping insertion in model container [2019-12-07 15:58:43,921 INFO L185 PluginConnector]: Executing the observer CACSL2BoogieTranslatorObserver from plugin CACSL2BoogieTranslator for "CDTParser AST 07.12 03:58:43" (1/1) ... [2019-12-07 15:58:43,926 INFO L145 MainTranslator]: Starting translation in SV-COMP mode [2019-12-07 15:58:43,966 INFO L178 MainTranslator]: Built tables and reachable declarations [2019-12-07 15:58:44,282 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:58:44,290 INFO L203 MainTranslator]: Completed pre-run [2019-12-07 15:58:44,368 INFO L206 PostProcessor]: Analyzing one entry point: main [2019-12-07 15:58:44,407 INFO L208 MainTranslator]: Completed translation [2019-12-07 15:58:44,407 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44 WrapperNode [2019-12-07 15:58:44,407 INFO L132 PluginConnector]: ------------------------ END CACSL2BoogieTranslator---------------------------- [2019-12-07 15:58:44,408 INFO L113 PluginConnector]: ------------------------Boogie Procedure Inliner---------------------------- [2019-12-07 15:58:44,408 INFO L271 PluginConnector]: Initializing Boogie Procedure Inliner... [2019-12-07 15:58:44,408 INFO L275 PluginConnector]: Boogie Procedure Inliner initialized [2019-12-07 15:58:44,414 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,438 INFO L185 PluginConnector]: Executing the observer Inliner from plugin Boogie Procedure Inliner for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,620 INFO L132 PluginConnector]: ------------------------ END Boogie Procedure Inliner---------------------------- [2019-12-07 15:58:44,620 INFO L113 PluginConnector]: ------------------------Boogie Preprocessor---------------------------- [2019-12-07 15:58:44,620 INFO L271 PluginConnector]: Initializing Boogie Preprocessor... [2019-12-07 15:58:44,620 INFO L275 PluginConnector]: Boogie Preprocessor initialized [2019-12-07 15:58:44,627 INFO L185 PluginConnector]: Executing the observer EnsureBoogieModelObserver from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,627 INFO L185 PluginConnector]: Executing the observer TypeChecker from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,655 INFO L185 PluginConnector]: Executing the observer ConstExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,655 INFO L185 PluginConnector]: Executing the observer StructExpander from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,733 INFO L185 PluginConnector]: Executing the observer UnstructureCode from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,826 INFO L185 PluginConnector]: Executing the observer FunctionInliner from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,870 INFO L185 PluginConnector]: Executing the observer BoogieSymbolTableConstructor from plugin Boogie Preprocessor for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... [2019-12-07 15:58:44,926 INFO L132 PluginConnector]: ------------------------ END Boogie Preprocessor---------------------------- [2019-12-07 15:58:44,927 INFO L113 PluginConnector]: ------------------------RCFGBuilder---------------------------- [2019-12-07 15:58:44,927 INFO L271 PluginConnector]: Initializing RCFGBuilder... [2019-12-07 15:58:44,927 INFO L275 PluginConnector]: RCFGBuilder initialized [2019-12-07 15:58:44,927 INFO L185 PluginConnector]: Executing the observer RCFGBuilderObserver from plugin RCFGBuilder for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (1/1) ... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 1 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 15:58:44,977 INFO L130 BoogieDeclarations]: Found specification of procedure #Ultimate.allocOnStack [2019-12-07 15:58:44,977 INFO L130 BoogieDeclarations]: Found specification of procedure write~init~int [2019-12-07 15:58:44,977 INFO L130 BoogieDeclarations]: Found specification of procedure ULTIMATE.start [2019-12-07 15:58:44,977 INFO L138 BoogieDeclarations]: Found implementation of procedure ULTIMATE.start [2019-12-07 15:58:52,839 INFO L282 CfgBuilder]: Using the 1 location(s) as analysis (start of procedure ULTIMATE.start) [2019-12-07 15:58:52,840 INFO L287 CfgBuilder]: Removed 2017 assume(true) statements. [2019-12-07 15:58:52,843 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:58:52 BoogieIcfgContainer [2019-12-07 15:58:52,843 INFO L132 PluginConnector]: ------------------------ END RCFGBuilder---------------------------- [2019-12-07 15:58:52,844 INFO L113 PluginConnector]: ------------------------BuchiAutomizer---------------------------- [2019-12-07 15:58:52,844 INFO L271 PluginConnector]: Initializing BuchiAutomizer... [2019-12-07 15:58:52,846 INFO L275 PluginConnector]: BuchiAutomizer initialized [2019-12-07 15:58:52,847 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 15:58:52,847 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "CDTParser AST 07.12 03:58:43" (1/3) ... [2019-12-07 15:58:52,847 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@66fce5e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 03:58:52, skipping insertion in model container [2019-12-07 15:58:52,847 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 15:58:52,847 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.cacsl2boogietranslator AST 07.12 03:58:44" (2/3) ... [2019-12-07 15:58:52,848 INFO L205 PluginConnector]: Invalid model from BuchiAutomizer for observer de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer.BuchiAutomizerObserver@66fce5e8 and model type de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer AST 07.12 03:58:52, skipping insertion in model container [2019-12-07 15:58:52,848 INFO L99 BuchiAutomizer]: Safety of program was proven or not checked, starting termination analysis [2019-12-07 15:58:52,848 INFO L185 PluginConnector]: Executing the observer BuchiAutomizerObserver from plugin BuchiAutomizer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:58:52" (3/3) ... [2019-12-07 15:58:52,849 INFO L371 chiAutomizerObserver]: Analyzing ICFG elevator_spec3_product29.cil.c [2019-12-07 15:58:52,877 INFO L356 BuchiCegarLoop]: Interprodecural is true [2019-12-07 15:58:52,877 INFO L357 BuchiCegarLoop]: Hoare is false [2019-12-07 15:58:52,878 INFO L358 BuchiCegarLoop]: Compute interpolants for ForwardPredicates [2019-12-07 15:58:52,878 INFO L359 BuchiCegarLoop]: Backedges is STRAIGHT_LINE [2019-12-07 15:58:52,878 INFO L360 BuchiCegarLoop]: Determinization is PREDICATE_ABSTRACTION [2019-12-07 15:58:52,878 INFO L361 BuchiCegarLoop]: Difference is false [2019-12-07 15:58:52,878 INFO L362 BuchiCegarLoop]: Minimize is MINIMIZE_SEVPA [2019-12-07 15:58:52,878 INFO L365 BuchiCegarLoop]: ======== Iteration 0==of CEGAR loop == BuchiCegarLoop======== [2019-12-07 15:58:52,955 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8968 states. [2019-12-07 15:58:53,065 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1811 [2019-12-07 15:58:53,065 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:58:53,065 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:58:53,084 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:58:53,084 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:58:53,084 INFO L424 BuchiCegarLoop]: ======== Iteration 1============ [2019-12-07 15:58:53,085 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 8968 states. [2019-12-07 15:58:53,142 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 1811 [2019-12-07 15:58:53,142 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:58:53,142 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:58:53,147 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:58:53,148 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:58:53,155 INFO L794 eck$LassoCheckResult]: Stem: 2535#ULTIMATE.startENTRYtrue #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 8373#L-1true havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 7644#L732true havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 7986#L740true main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 2405#L1874true assume 0 != main_~tmp~15; 3186#L1851true ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2855#L121true havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 7698#L1256true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1179#L1281true bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1367#L399true assume 0 == initPersonOnFloor_~floor; 1194#L400true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4382#L507-1true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8670#L191true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7650#L203-2true havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7633#L2140true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 843#L2192true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7248#L1376true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6785#L1377true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1381#L2157true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 342#L2178true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6656#L1381true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1090#L1482true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8360#L2821true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7632#L2140-1true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1484#L2157-10true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 311#L2178-10true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8740#L2832true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4628#L2969true assume !(0 != timeShift_~tmp___9~3); 440#L3060true assume !(1 == ~doorState~0); 442#L3060-2true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 550#L2724true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3651#L2745true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2023#L2697true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1895#L2344-2true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1365#L2513-2true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7677#L2666-2true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1091#L2715true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1076#L3068true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2905#L2759true assume !(1 == ~currentHeading~0); 2681#L2769true assume !(0 == ~currentFloorID~0); 2683#L2769-2true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5869#L2775-5true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3772#L1507true assume !(-1 == ~expectedDirection~0); 2574#L1519true assume !(1 == ~expectedDirection~0); 2381#L1520true havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7634#L2140-2true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 829#L2192-3true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7252#L1376-1true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6788#L1377-1true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1490#L2157-12true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 312#L2178-12true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6631#L1381-2true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1078#L1482-1true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8355#L2821-1true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7623#L2140-3true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1463#L2157-22true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 274#L2178-22true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8739#L2832-1true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4634#L2969-1true assume !(0 != timeShift_~tmp___9~3); 449#L3060-3true assume !(1 == ~doorState~0); 451#L3060-5true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 554#L2724-2true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3653#L2745-2true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2025#L2697-2true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1885#L2344-8true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1343#L2513-8true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7665#L2666-8true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1085#L2715-2true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1075#L3068-1true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2894#L2759-3true assume !(1 == ~currentHeading~0); 2658#L2769-9true assume !(0 == ~currentFloorID~0); 2659#L2769-11true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5860#L2775-11true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3776#L1507-1true assume !(-1 == ~expectedDirection~0); 2554#L1519-1true assume !(1 == ~expectedDirection~0); 2382#L1520-1true havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7626#L2140-4true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 835#L2192-6true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7215#L1376-2true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6792#L1377-2true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1471#L2157-24true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 277#L2178-24true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6637#L1381-4true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1081#L1482-2true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8354#L2821-2true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7625#L2140-5true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1434#L2157-34true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 248#L2178-34true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8736#L2832-2true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4631#L2969-2true assume !(0 != timeShift_~tmp___9~3); 424#L3060-6true assume 1 == ~doorState~0;~doorState~0 := 0; 434#L3060-8true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 568#L2724-4true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3662#L2745-4true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2036#L2697-4true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2067#L2344-14true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1330#L2513-14true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7738#L2666-14true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1086#L2715-4true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1077#L3068-2true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2897#L2759-6true assume !(1 == ~currentHeading~0); 2653#L2769-18true assume !(0 == ~currentFloorID~0); 6305#L2769-20true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5846#L2775-17true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3778#L1507-2true assume !(-1 == ~expectedDirection~0); 2556#L1519-2true assume !(1 == ~expectedDirection~0); 2354#L1520-2true havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 7700#L1256-1true assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1183#L1281-1true bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1355#L399-1true assume 0 == initPersonOnFloor_~floor; 1175#L400-2true assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 4366#L507-3true callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 8669#L191-2true assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 7647#L203-5true havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7627#L2140-6true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 814#L2192-9true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7218#L1376-3true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6755#L1377-3true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1414#L2157-36true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 439#L2178-36true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6642#L1381-6true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1083#L1482-3true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8356#L2821-3true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7629#L2140-7true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1409#L2157-46true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 409#L2178-46true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8737#L2832-3true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4636#L2969-3true assume !(0 != timeShift_~tmp___9~3); 432#L3060-9true assume !(1 == ~doorState~0); 410#L3060-11true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 776#L2724-6true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3635#L2745-6true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2005#L2697-6true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2024#L2344-20true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1215#L2513-20true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7730#L2666-20true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1089#L2715-6true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1073#L3068-3true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2881#L2759-9true assume !(1 == ~currentHeading~0); 6299#L2769-27true assume !(0 == ~currentFloorID~0); 6287#L2769-29true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5838#L2775-23true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3783#L1507-3true assume !(-1 == ~expectedDirection~0); 2560#L1519-3true assume !(1 == ~expectedDirection~0); 2355#L1520-3true cleanup_~i~2 := 0; 3798#L1683-2true [2019-12-07 15:58:53,157 INFO L796 eck$LassoCheckResult]: Loop: 3798#L1683-2true assume !false; 3909#L1684true cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3744#L1687true assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 8047#L1967true cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 2597#L1691true assume 1 != cleanup_~tmp___0~4; 2598#L1691-1true havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 5569#L128-244true assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 5229#L155-244true anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 5978#L2248true assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 7829#L2312true isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 7969#L2325true cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 3016#L1703true assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7620#L2140-8true __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 802#L2192-12true __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 7226#L1376-4true assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 6759#L1377-4true assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1319#L2157-48true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 412#L2178-48true __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 6619#L1381-8true assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 1084#L1482-4true havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 8358#L2821-4true assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 7619#L2140-9true stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1292#L2157-58true assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 386#L2178-58true stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 8738#L2832-4true timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 4641#L2969-4true assume !(0 != timeShift_~tmp___9~3); 414#L3060-12true assume !(1 == ~doorState~0); 415#L3060-14true stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 784#L2724-8true assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3644#L2745-8true stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2015#L2697-8true assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2006#L2344-26true assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1201#L2513-26true assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 7722#L2666-26true stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1079#L2715-8true timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1074#L3068-4true assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2886#L2759-12true assume !(1 == ~currentHeading~0); 6274#L2769-36true assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 6276#L2769-38true assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 5825#L2775-29true havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3786#L1507-4true assume !(-1 == ~expectedDirection~0); 2562#L1519-4true assume !(1 == ~expectedDirection~0); 2361#L1520-4true cleanup_~i~2 := 1 + cleanup_~i~2; 3798#L1683-2true [2019-12-07 15:58:53,161 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:58:53,162 INFO L82 PathProgramCache]: Analyzing trace with hash -507615414, now seen corresponding path program 1 times [2019-12-07 15:58:53,168 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:58:53,169 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1714182828] [2019-12-07 15:58:53,169 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:58:53,299 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:58:53,443 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:58:53,444 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1714182828] [2019-12-07 15:58:53,444 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:58:53,445 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:58:53,445 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [844843359] [2019-12-07 15:58:53,449 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:58:53,449 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:58:53,449 INFO L82 PathProgramCache]: Analyzing trace with hash -277546529, now seen corresponding path program 1 times [2019-12-07 15:58:53,450 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:58:53,450 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [404118970] [2019-12-07 15:58:53,450 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:58:53,465 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:58:53,524 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:58:53,525 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [404118970] [2019-12-07 15:58:53,525 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:58:53,525 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [9] imperfect sequences [] total 9 [2019-12-07 15:58:53,525 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [726517462] [2019-12-07 15:58:53,526 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:58:53,527 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:58:53,536 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 9 interpolants. [2019-12-07 15:58:53,537 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=16, Invalid=56, Unknown=0, NotChecked=0, Total=72 [2019-12-07 15:58:53,538 INFO L87 Difference]: Start difference. First operand 8968 states. Second operand 9 states. [2019-12-07 15:59:02,076 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:02,077 INFO L93 Difference]: Finished difference Result 29084 states and 54433 transitions. [2019-12-07 15:59:02,077 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 38 states. [2019-12-07 15:59:02,078 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 29084 states and 54433 transitions. [2019-12-07 15:59:02,232 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 6460 [2019-12-07 15:59:02,384 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 29084 states to 28948 states and 54272 transitions. [2019-12-07 15:59:02,385 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 28948 [2019-12-07 15:59:02,409 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 28948 [2019-12-07 15:59:02,409 INFO L73 IsDeterministic]: Start isDeterministic. Operand 28948 states and 54272 transitions. [2019-12-07 15:59:02,447 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:02,447 INFO L688 BuchiCegarLoop]: Abstraction has 28948 states and 54272 transitions. [2019-12-07 15:59:02,484 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 28948 states and 54272 transitions. [2019-12-07 15:59:02,730 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 28948 to 14356. [2019-12-07 15:59:02,731 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14356 states. [2019-12-07 15:59:02,748 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14356 states to 14356 states and 26958 transitions. [2019-12-07 15:59:02,749 INFO L711 BuchiCegarLoop]: Abstraction has 14356 states and 26958 transitions. [2019-12-07 15:59:02,749 INFO L591 BuchiCegarLoop]: Abstraction has 14356 states and 26958 transitions. [2019-12-07 15:59:02,749 INFO L424 BuchiCegarLoop]: ======== Iteration 2============ [2019-12-07 15:59:02,750 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14356 states and 26958 transitions. [2019-12-07 15:59:02,785 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3182 [2019-12-07 15:59:02,785 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:02,785 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:02,789 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:02,790 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:02,790 INFO L794 eck$LassoCheckResult]: Stem: 41721#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 41722#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 46796#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 46797#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 41544#L1874 assume 0 != main_~tmp~15; 41545#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 42186#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 42187#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 40066#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 40067#L399 assume 0 == initPersonOnFloor_~floor; 40104#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 39106#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43708#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 46806#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46777#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 39625#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 39626#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 46339#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 40459#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38852#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 38853#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 38363#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39940#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 45943#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 43638#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 43639#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 43793#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38780#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 44078#L2969 assume !(0 != timeShift_~tmp___9~3); 39001#L3060 assume !(1 == ~doorState~0); 39002#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 39004#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 39125#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 41147#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 41030#L2344-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 41031#L702-2 stopRequestedInDirection__wrappee__empty_#t~ret79 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~21 := stopRequestedInDirection__wrappee__empty_#t~ret79;havoc stopRequestedInDirection__wrappee__empty_#t~ret79; 40973#L2348-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~21;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 38480#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 39941#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 39921#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 39923#L2759 assume !(1 == ~currentHeading~0); 41927#L2769 assume !(0 == ~currentFloorID~0); 41928#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41886#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 43046#L1507 assume !(-1 == ~expectedDirection~0); 41757#L1519 assume !(1 == ~expectedDirection~0); 41378#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 41507#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 39606#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 39607#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 46660#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 40571#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38741#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 38742#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 38373#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39927#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46761#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46762#L2157-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38693#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38694#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 44087#L2969-1 assume !(0 != timeShift_~tmp___9~3); 39014#L3060-3 assume !(1 == ~doorState~0); 39015#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 39018#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 39135#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 41149#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 41013#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 41014#L2513-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 40943#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 39935#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 39918#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 39919#L2759-3 assume !(1 == ~currentHeading~0); 42223#L2769-9 assume !(0 == ~currentFloorID~0); 41888#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 41864#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 43048#L1507-1 assume !(-1 == ~expectedDirection~0); 41739#L1519-1 assume !(1 == ~expectedDirection~0); 41379#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 48775#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 48769#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 48767#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 48748#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 40547#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38665#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 38666#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 38376#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39931#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46765#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46766#L2157-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38636#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38637#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 44082#L2969-2 assume !(0 != timeShift_~tmp___9~3); 44083#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 48790#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 48788#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 48784#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 48782#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 48783#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 49010#L2513-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 48996#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 48993#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 48992#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 42227#L2759-6 assume !(1 == ~currentHeading~0); 42228#L2769-18 assume !(0 == ~currentFloorID~0); 41880#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 45648#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 43049#L1507-2 assume !(-1 == ~expectedDirection~0); 41741#L1519-2 assume !(1 == ~expectedDirection~0); 41380#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 41470#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 40077#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 40078#L399-1 assume 0 == initPersonOnFloor_~floor; 40057#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 39093#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 43685#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 46802#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46767#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 39586#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 39587#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 46627#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 40479#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38981#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 38982#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 38382#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39933#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46770#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46771#L2157-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 39951#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 50813#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 50811#L2969-3 assume !(0 != timeShift_~tmp___9~3); 50810#L3060-9 assume !(1 == ~doorState~0); 50809#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 50806#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 48923#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 48922#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 48920#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 48918#L2513-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 48919#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 49522#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 49521#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 42204#L2759-9 assume !(1 == ~currentHeading~0); 42205#L2769-27 assume !(0 == ~currentFloorID~0); 42176#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 45642#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 43051#L1507-3 assume !(-1 == ~expectedDirection~0); 41745#L1519-3 assume !(1 == ~expectedDirection~0); 41368#L1520-3 cleanup_~i~2 := 0; 41471#L1683-2 [2019-12-07 15:59:02,791 INFO L796 eck$LassoCheckResult]: Loop: 41471#L1683-2 assume !false; 43059#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 43021#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 43022#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 41795#L1691 assume 1 != cleanup_~tmp___0~4; 41796#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 41797#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 43973#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 44967#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 43371#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 46960#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 42336#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 42337#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 39571#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 39572#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 46634#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 40338#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38936#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 38937#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 38385#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 39934#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 46755#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 46756#L2157-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 38920#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 38921#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 44097#L2969-4 assume !(0 != timeShift_~tmp___9~3); 38961#L3060-12 assume !(1 == ~doorState~0); 38962#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 38963#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 49479#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 49478#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 41122#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 41123#L2513-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 40692#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 39928#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 39929#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 48927#L2759-12 assume !(1 == ~currentHeading~0); 48926#L2769-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 42058#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 45631#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 43053#L1507-4 assume !(-1 == ~expectedDirection~0); 41747#L1519-4 assume !(1 == ~expectedDirection~0); 41373#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 41471#L1683-2 [2019-12-07 15:59:02,791 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:02,791 INFO L82 PathProgramCache]: Analyzing trace with hash 247338546, now seen corresponding path program 1 times [2019-12-07 15:59:02,791 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:02,791 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1121962940] [2019-12-07 15:59:02,791 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:02,815 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:02,870 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:02,870 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1121962940] [2019-12-07 15:59:02,871 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:02,871 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:02,871 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [702587939] [2019-12-07 15:59:02,871 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:02,872 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:02,872 INFO L82 PathProgramCache]: Analyzing trace with hash 1268030052, now seen corresponding path program 1 times [2019-12-07 15:59:02,872 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:02,872 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [285550258] [2019-12-07 15:59:02,872 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:02,882 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:02,919 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:02,919 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [285550258] [2019-12-07 15:59:02,919 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:02,919 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:59:02,919 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [145885534] [2019-12-07 15:59:02,920 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:02,920 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:02,920 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:59:02,920 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=12, Invalid=30, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:59:02,920 INFO L87 Difference]: Start difference. First operand 14356 states and 26958 transitions. cyclomatic complexity: 12603 Second operand 7 states. [2019-12-07 15:59:10,962 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:10,962 INFO L93 Difference]: Finished difference Result 49227 states and 92356 transitions. [2019-12-07 15:59:10,963 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 12 states. [2019-12-07 15:59:10,963 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 49227 states and 92356 transitions. [2019-12-07 15:59:11,122 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11733 [2019-12-07 15:59:11,254 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 49227 states to 49227 states and 92356 transitions. [2019-12-07 15:59:11,254 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 49227 [2019-12-07 15:59:11,278 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 49227 [2019-12-07 15:59:11,278 INFO L73 IsDeterministic]: Start isDeterministic. Operand 49227 states and 92356 transitions. [2019-12-07 15:59:11,302 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:11,302 INFO L688 BuchiCegarLoop]: Abstraction has 49227 states and 92356 transitions. [2019-12-07 15:59:11,328 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 49227 states and 92356 transitions. [2019-12-07 15:59:11,511 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 49227 to 14216. [2019-12-07 15:59:11,512 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14216 states. [2019-12-07 15:59:11,528 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14216 states to 14216 states and 26714 transitions. [2019-12-07 15:59:11,529 INFO L711 BuchiCegarLoop]: Abstraction has 14216 states and 26714 transitions. [2019-12-07 15:59:11,529 INFO L591 BuchiCegarLoop]: Abstraction has 14216 states and 26714 transitions. [2019-12-07 15:59:11,529 INFO L424 BuchiCegarLoop]: ======== Iteration 3============ [2019-12-07 15:59:11,529 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14216 states and 26714 transitions. [2019-12-07 15:59:11,557 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3147 [2019-12-07 15:59:11,557 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:11,557 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:11,561 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:11,561 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:11,561 INFO L794 eck$LassoCheckResult]: Stem: 105154#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 105155#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 110019#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 110020#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 104992#L1874 assume 0 != main_~tmp~15; 104993#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 105608#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 105609#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 103633#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 103634#L399 assume 0 == initPersonOnFloor_~floor; 103667#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 102706#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 107089#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 110029#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 110000#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 103224#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 103225#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 109585#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 104002#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 102458#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 102459#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 101975#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 103516#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 109205#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 107018#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 107019#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 107173#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 102388#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 107443#L2969 assume !(0 != timeShift_~tmp___9~3); 102601#L3060 assume !(1 == ~doorState~0); 102602#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 102604#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 102725#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 104615#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 104509#L2344-2 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 104510#L702-2 stopRequestedInDirection__wrappee__empty_#t~ret79 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~21 := stopRequestedInDirection__wrappee__empty_#t~ret79;havoc stopRequestedInDirection__wrappee__empty_#t~ret79; 104455#L2348-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp~21;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 102092#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 103517#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 103498#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 103500#L2759 assume !(1 == ~currentHeading~0); 105358#L2769 assume !(0 == ~currentFloorID~0); 105359#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 105317#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 111163#L1507 assume !(-1 == ~expectedDirection~0); 105188#L1519 assume !(1 == ~expectedDirection~0); 104834#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 111160#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 111158#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 111155#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 111156#L1438-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 111161#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 111159#L1459-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 111157#L1470-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 111126#L1481-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 111112#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 111108#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 111104#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 111101#L2157-22 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 111097#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 111096#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 111094#L2969-1 assume !(0 != timeShift_~tmp___9~3); 111092#L3060-3 assume !(1 == ~doorState~0); 111082#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 111081#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 111069#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 110985#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 110986#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 110964#L2513-8 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 110921#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 110918#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 110916#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 110917#L2759-3 assume !(1 == ~currentHeading~0); 111165#L2769-9 assume !(0 == ~currentFloorID~0); 105319#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 105295#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 113369#L1507-1 assume !(-1 == ~expectedDirection~0); 112464#L1519-1 assume !(1 == ~expectedDirection~0); 112452#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 112451#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 112449#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 112442#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 112443#L1438-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 112415#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 112410#L1459-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 112373#L1470-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 112269#L1481-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 112261#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 112258#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 112257#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 112255#L2157-34 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 112247#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 112246#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 112245#L2969-2 assume !(0 != timeShift_~tmp___9~3); 112244#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 112243#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 112241#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 112237#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 112231#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 112228#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 112147#L2513-14 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 112134#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 112126#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 112123#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 112124#L2759-6 assume !(1 == ~currentHeading~0); 112454#L2769-18 assume !(0 == ~currentFloorID~0); 105311#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 108934#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 106439#L1507-2 assume !(-1 == ~expectedDirection~0); 105172#L1519-2 assume !(1 == ~expectedDirection~0); 104836#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 104923#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 103643#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 103644#L399-1 assume 0 == initPersonOnFloor_~floor; 103625#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 102693#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 112460#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 112003#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 112001#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 112000#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 111998#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 111997#L1438-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 111996#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 111995#L1459-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 111974#L1470-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 111917#L1481-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 111910#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 111908#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 111907#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 111905#L2157-46 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 111901#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 111899#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 111898#L2969-3 assume !(0 != timeShift_~tmp___9~3); 111897#L3060-9 assume !(1 == ~doorState~0); 111896#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 111881#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 111878#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 111876#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 111877#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 111812#L2513-20 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 111781#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 111779#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 111777#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 111778#L2759-9 assume !(1 == ~currentHeading~0); 112024#L2769-27 assume !(0 == ~currentFloorID~0); 105600#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 109211#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 112510#L1507-3 assume !(-1 == ~expectedDirection~0); 112503#L1519-3 assume !(1 == ~expectedDirection~0); 112498#L1520-3 cleanup_~i~2 := 0; 112493#L1683-2 [2019-12-07 15:59:11,562 INFO L796 eck$LassoCheckResult]: Loop: 112493#L1683-2 assume !false; 112491#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 112490#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 112489#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 112488#L1691 assume 1 != cleanup_~tmp___0~4; 112487#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 112484#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 112481#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 112480#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 112467#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 112466#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 111595#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 111594#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 111593#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 111590#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 111591#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 111592#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 111589#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 111587#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 111559#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 111545#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 111541#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 111537#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 111535#L2157-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 111530#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 111529#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 111527#L2969-4 assume !(0 != timeShift_~tmp___9~3); 111526#L3060-12 assume !(1 == ~doorState~0); 111525#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 111441#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 111437#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 111435#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 111436#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 111404#L2513-26 assume 0 == ~currentFloorID~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 0;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 111354#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 111351#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 111349#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 111350#L2759-12 assume !(1 == ~currentHeading~0); 112023#L2769-36 assume 0 == ~currentFloorID~0;~currentHeading~0 := 1; 105489#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 109207#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 112506#L1507-4 assume !(-1 == ~expectedDirection~0); 112501#L1519-4 assume !(1 == ~expectedDirection~0); 112499#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 112493#L1683-2 [2019-12-07 15:59:11,562 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:11,562 INFO L82 PathProgramCache]: Analyzing trace with hash -1610536740, now seen corresponding path program 1 times [2019-12-07 15:59:11,562 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:11,562 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1269442433] [2019-12-07 15:59:11,563 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:11,580 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:11,619 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:11,620 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1269442433] [2019-12-07 15:59:11,620 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:11,620 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:11,620 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [211062751] [2019-12-07 15:59:11,621 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:11,621 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:11,621 INFO L82 PathProgramCache]: Analyzing trace with hash -1255217722, now seen corresponding path program 1 times [2019-12-07 15:59:11,621 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:11,621 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [388719296] [2019-12-07 15:59:11,621 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:11,631 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:11,650 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:11,651 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [388719296] [2019-12-07 15:59:11,651 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:11,651 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:59:11,651 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [430776384] [2019-12-07 15:59:11,652 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:11,652 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:11,652 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:59:11,652 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:59:11,652 INFO L87 Difference]: Start difference. First operand 14216 states and 26714 transitions. cyclomatic complexity: 12499 Second operand 5 states. [2019-12-07 15:59:12,520 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:12,520 INFO L93 Difference]: Finished difference Result 22611 states and 42314 transitions. [2019-12-07 15:59:12,520 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 15:59:12,521 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 22611 states and 42314 transitions. [2019-12-07 15:59:12,581 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5333 [2019-12-07 15:59:12,631 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 22611 states to 22611 states and 42314 transitions. [2019-12-07 15:59:12,631 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 22611 [2019-12-07 15:59:12,643 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 22611 [2019-12-07 15:59:12,643 INFO L73 IsDeterministic]: Start isDeterministic. Operand 22611 states and 42314 transitions. [2019-12-07 15:59:12,656 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:12,656 INFO L688 BuchiCegarLoop]: Abstraction has 22611 states and 42314 transitions. [2019-12-07 15:59:12,672 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 22611 states and 42314 transitions. [2019-12-07 15:59:12,776 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 22611 to 14261. [2019-12-07 15:59:12,776 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 14261 states. [2019-12-07 15:59:12,793 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 14261 states to 14261 states and 26759 transitions. [2019-12-07 15:59:12,793 INFO L711 BuchiCegarLoop]: Abstraction has 14261 states and 26759 transitions. [2019-12-07 15:59:12,793 INFO L591 BuchiCegarLoop]: Abstraction has 14261 states and 26759 transitions. [2019-12-07 15:59:12,793 INFO L424 BuchiCegarLoop]: ======== Iteration 4============ [2019-12-07 15:59:12,793 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 14261 states and 26759 transitions. [2019-12-07 15:59:12,821 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 3157 [2019-12-07 15:59:12,821 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:12,821 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:12,824 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:12,824 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:12,825 INFO L794 eck$LassoCheckResult]: Stem: 142102#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 142103#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 147144#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 147145#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 141912#L1874 assume 0 != main_~tmp~15; 141913#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 142571#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 142572#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 140495#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 140496#L399 assume 0 == initPersonOnFloor_~floor; 140529#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 139559#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 144070#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 147155#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 147125#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 140077#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 140078#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 146693#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140864#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 139309#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 139310#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138820#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 140378#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 146306#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 144000#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 144001#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 144155#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 139239#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 144440#L2969 assume !(0 != timeShift_~tmp___9~3); 139454#L3060 assume !(1 == ~doorState~0); 139455#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 139457#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 139578#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 141517#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 141404#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 140842#L2513-2 assume !(0 == ~currentFloorID~0); 140843#L2519-2 assume !(~currentFloorID~0 > 0); 138955#L2534-2 assume ~currentFloorID~0 > 0; 138774#L2536-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 138775#L2537-2 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 138937#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 148448#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 147930#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 142623#L2759 assume !(1 == ~currentHeading~0); 142308#L2769 assume !(0 == ~currentFloorID~0); 142309#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 142267#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 143412#L1507 assume !(-1 == ~expectedDirection~0); 142139#L1519 assume !(1 == ~expectedDirection~0); 141746#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 141874#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 140058#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 140059#L1376-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 146697#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140950#L2157-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 139240#L2178-12 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 139241#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 139394#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 148610#L2821-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 148601#L128-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 148598#L155-61 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 148594#L2792-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 148589#L2804-1 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 148587#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 148586#L2969-1 assume !(0 != timeShift_~tmp___9~3); 148585#L3060-3 assume !(1 == ~doorState~0); 148584#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 148583#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 148578#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 148577#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 141388#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 140805#L2513-8 assume !(0 == ~currentFloorID~0); 140806#L2519-8 assume !(~currentFloorID~0 > 0); 139063#L2534-8 assume ~currentFloorID~0 > 0; 138756#L2536-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 138757#L2537-8 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 138924#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 148657#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 148655#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 142608#L2759-3 assume !(1 == ~currentHeading~0); 142268#L2769-9 assume !(0 == ~currentFloorID~0); 142269#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 142245#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 143414#L1507-1 assume !(-1 == ~expectedDirection~0); 142121#L1519-1 assume !(1 == ~expectedDirection~0); 141747#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 149237#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 149236#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 149235#L1376-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 149233#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140936#L2157-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 139156#L2178-24 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 139157#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138833#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 140367#L2821-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 146261#L128-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 143901#L155-122 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 143902#L2792-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 144126#L2804-2 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 139094#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 144444#L2969-2 assume !(0 != timeShift_~tmp___9~3); 139431#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 139432#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 139446#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 139623#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 141538#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 141539#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 140776#L2513-14 assume !(0 == ~currentFloorID~0); 140777#L2519-14 assume !(~currentFloorID~0 > 0); 139060#L2534-14 assume ~currentFloorID~0 > 0; 138726#L2536-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 138728#L2537-14 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 138805#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 148658#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 148656#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 142611#L2759-6 assume !(1 == ~currentHeading~0); 142262#L2769-18 assume !(0 == ~currentFloorID~0); 142263#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146022#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 143415#L1507-2 assume !(-1 == ~expectedDirection~0); 142123#L1519-2 assume !(1 == ~expectedDirection~0); 141748#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 141839#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 140505#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 140506#L399-1 assume 0 == initPersonOnFloor_~floor; 140487#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 139546#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 144047#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 147154#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 149185#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 149184#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 149181#L1376-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 149182#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140894#L2157-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 139452#L2178-36 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 139453#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 138839#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 140368#L2821-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 146178#L128-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 144523#L155-183 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 144560#L2792-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 144133#L2804-3 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 139407#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 144452#L2969-3 assume !(0 != timeShift_~tmp___9~3); 139443#L3060-9 assume !(1 == ~doorState~0); 139408#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 139409#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 139988#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 141492#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 141493#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 140575#L2513-20 assume !(0 == ~currentFloorID~0); 140576#L2519-20 assume !(~currentFloorID~0 > 0); 139054#L2534-20 assume ~currentFloorID~0 > 0; 138642#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 138644#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 138787#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 148652#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 148651#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 142589#L2759-9 assume !(1 == ~currentHeading~0); 142590#L2769-27 assume !(0 == ~currentFloorID~0); 142560#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146016#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 143416#L1507-3 assume !(-1 == ~expectedDirection~0); 142127#L1519-3 assume !(1 == ~expectedDirection~0); 141736#L1520-3 cleanup_~i~2 := 0; 141840#L1683-2 [2019-12-07 15:59:12,825 INFO L796 eck$LassoCheckResult]: Loop: 141840#L1683-2 assume !false; 143424#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 143387#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 143388#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 142176#L1691 assume 1 != cleanup_~tmp___0~4; 142177#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 142178#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 144335#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 145330#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 143738#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 147309#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 147390#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 148978#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 148977#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 148975#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 148973#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140751#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 139391#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 139392#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 138842#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 140369#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 147107#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 140741#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 140700#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 139375#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 139376#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 144459#L2969-4 assume !(0 != timeShift_~tmp___9~3); 139414#L3060-12 assume !(1 == ~doorState~0); 139415#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 139417#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 140000#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 141506#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 141490#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 140542#L2513-26 assume !(0 == ~currentFloorID~0); 140543#L2519-26 assume !(~currentFloorID~0 > 0); 139050#L2534-26 assume ~currentFloorID~0 > 0; 138606#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 138608#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 138766#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 148654#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 148653#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 142595#L2759-12 assume !(1 == ~currentHeading~0); 142596#L2769-36 assume !(0 == ~currentFloorID~0); 142441#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 146005#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 143418#L1507-4 assume !(-1 == ~expectedDirection~0); 142128#L1519-4 assume !(1 == ~expectedDirection~0); 141741#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 141840#L1683-2 [2019-12-07 15:59:12,825 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:12,825 INFO L82 PathProgramCache]: Analyzing trace with hash 831856157, now seen corresponding path program 1 times [2019-12-07 15:59:12,825 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:12,826 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2000538977] [2019-12-07 15:59:12,826 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:12,840 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:12,880 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:12,880 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2000538977] [2019-12-07 15:59:12,881 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:12,881 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:12,881 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1777145353] [2019-12-07 15:59:12,881 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:12,882 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:12,882 INFO L82 PathProgramCache]: Analyzing trace with hash 1940810199, now seen corresponding path program 1 times [2019-12-07 15:59:12,882 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:12,882 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [33369441] [2019-12-07 15:59:12,882 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:12,891 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:12,901 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:12,902 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [33369441] [2019-12-07 15:59:12,902 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:12,902 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 15:59:12,902 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1991305709] [2019-12-07 15:59:12,902 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:12,902 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:12,902 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 15:59:12,903 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 15:59:12,903 INFO L87 Difference]: Start difference. First operand 14261 states and 26759 transitions. cyclomatic complexity: 12499 Second operand 3 states. [2019-12-07 15:59:14,651 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:14,651 INFO L93 Difference]: Finished difference Result 24208 states and 44624 transitions. [2019-12-07 15:59:14,652 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 15:59:14,652 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 24208 states and 44624 transitions. [2019-12-07 15:59:14,711 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5605 [2019-12-07 15:59:14,760 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 24208 states to 24208 states and 44624 transitions. [2019-12-07 15:59:14,760 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 24208 [2019-12-07 15:59:14,771 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 24208 [2019-12-07 15:59:14,771 INFO L73 IsDeterministic]: Start isDeterministic. Operand 24208 states and 44624 transitions. [2019-12-07 15:59:14,783 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:14,783 INFO L688 BuchiCegarLoop]: Abstraction has 24208 states and 44624 transitions. [2019-12-07 15:59:14,798 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 24208 states and 44624 transitions. [2019-12-07 15:59:14,951 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 24208 to 24208. [2019-12-07 15:59:14,951 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 24208 states. [2019-12-07 15:59:14,979 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 24208 states to 24208 states and 44624 transitions. [2019-12-07 15:59:14,979 INFO L711 BuchiCegarLoop]: Abstraction has 24208 states and 44624 transitions. [2019-12-07 15:59:14,979 INFO L591 BuchiCegarLoop]: Abstraction has 24208 states and 44624 transitions. [2019-12-07 15:59:14,979 INFO L424 BuchiCegarLoop]: ======== Iteration 5============ [2019-12-07 15:59:14,979 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 24208 states and 44624 transitions. [2019-12-07 15:59:15,027 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 5605 [2019-12-07 15:59:15,027 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:15,027 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:15,030 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:15,030 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:15,031 INFO L794 eck$LassoCheckResult]: Stem: 180725#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 180726#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 185879#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 185880#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 180536#L1874 assume 0 != main_~tmp~15; 180537#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 181185#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 181186#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 179052#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 179053#L399 assume 0 == initPersonOnFloor_~floor; 179086#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 178106#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 182737#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 185889#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 185860#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 178623#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 178624#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 185396#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 179425#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 177852#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 177853#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 177297#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 178933#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 184981#L128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 182667#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 182668#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 182843#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 177777#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 183126#L2969 assume !(0 != timeShift_~tmp___9~3); 178001#L3060 assume !(1 == ~doorState~0); 178002#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 178004#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 178127#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 180126#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 180013#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 179403#L2513-2 assume !(0 == ~currentFloorID~0); 179404#L2519-2 assume ~currentFloorID~0 > 0; 180035#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 180036#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 182600#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 179959#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 177430#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 194349#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 194348#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 181240#L2759 assume !(1 == ~currentHeading~0); 180939#L2769 assume !(0 == ~currentFloorID~0); 180940#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 180899#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 193692#L1507 assume !(-1 == ~expectedDirection~0); 193689#L1519 assume !(1 == ~expectedDirection~0); 193686#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 193684#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 193682#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 193680#L1376-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 193679#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 185402#L2157-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 194329#L2178-12 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 185244#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 177307#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 178921#L2821-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 184899#L128-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 182753#L155-61 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 182754#L2792-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 182804#L2804-1 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 177693#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 183134#L2969-1 assume !(0 != timeShift_~tmp___9~3); 178016#L3060-3 assume !(1 == ~doorState~0); 178017#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 178020#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 178135#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 180129#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 179997#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 179366#L2513-8 assume !(0 == ~currentFloorID~0); 179367#L2519-8 assume ~currentFloorID~0 > 0; 180024#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 180025#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 182354#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 179920#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 177417#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 194488#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 194487#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 194486#L2759-3 assume !(1 == ~currentHeading~0); 194482#L2769-9 assume !(0 == ~currentFloorID~0); 187670#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 180876#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 192077#L1507-1 assume !(-1 == ~expectedDirection~0); 192074#L1519-1 assume !(1 == ~expectedDirection~0); 192072#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 192071#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 192070#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 192068#L1376-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 192069#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 179506#L2157-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 179046#L2178-24 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 187641#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 187627#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 187626#L2821-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 187611#L128-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 187606#L155-122 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 187576#L2792-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 187575#L2804-2 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 187573#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 187565#L2969-2 assume !(0 != timeShift_~tmp___9~3); 187566#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 196904#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 196902#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 196898#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 196896#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 196895#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 186799#L2513-14 assume !(0 == ~currentFloorID~0); 186798#L2519-14 assume ~currentFloorID~0 > 0; 179995#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 179996#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 182404#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 179894#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 177396#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 194951#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 187125#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 187118#L2759-6 assume !(1 == ~currentHeading~0); 187116#L2769-18 assume !(0 == ~currentFloorID~0); 187111#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 185009#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 187106#L1507-2 assume !(-1 == ~expectedDirection~0); 187100#L1519-2 assume !(1 == ~expectedDirection~0); 187098#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 187097#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 187091#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 187090#L399-1 assume 0 == initPersonOnFloor_~floor; 187074#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 187049#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 187046#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 187043#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 187042#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 187041#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 187038#L1376-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 187039#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 187037#L2157-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 189931#L2178-36 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 186990#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 186991#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 189932#L2821-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 189933#L128-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 199939#L155-183 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 186967#L2792-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 186969#L2804-3 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 196070#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 196068#L2969-3 assume !(0 != timeShift_~tmp___9~3); 196069#L3060-9 assume !(1 == ~doorState~0); 197679#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 197676#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 197673#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 197671#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 197672#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 179131#L2513-20 assume !(0 == ~currentFloorID~0); 179132#L2519-20 assume ~currentFloorID~0 > 0; 180152#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 179669#L2534-20 assume ~currentFloorID~0 > 0; 177119#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 177121#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 177378#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 196486#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 196484#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 196483#L2759-9 assume !(1 == ~currentHeading~0); 196480#L2769-27 assume !(0 == ~currentFloorID~0); 188356#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 184993#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 188341#L1507-3 assume !(-1 == ~expectedDirection~0); 188334#L1519-3 assume !(1 == ~expectedDirection~0); 188329#L1520-3 cleanup_~i~2 := 0; 188328#L1683-2 [2019-12-07 15:59:15,031 INFO L796 eck$LassoCheckResult]: Loop: 188328#L1683-2 assume !false; 188327#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 188322#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 188320#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 188319#L1691 assume 1 != cleanup_~tmp___0~4; 188318#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 188311#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 188307#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 188306#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 188287#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 188285#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 188278#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 188276#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 188270#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 188267#L1376-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 188265#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 188266#L2157-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 195112#L2178-48 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 188241#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 188230#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 194635#L2821-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 188224#L128-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 188220#L155-249 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 187292#L2792-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 187290#L2804-4 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 187287#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 187285#L2969-4 assume !(0 != timeShift_~tmp___9~3); 187284#L3060-12 assume !(1 == ~doorState~0); 187283#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 187280#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 187276#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 187274#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 187275#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 186829#L2513-26 assume !(0 == ~currentFloorID~0); 186820#L2519-26 assume ~currentFloorID~0 > 0; 180121#L2520-26 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 179648#L2534-26 assume ~currentFloorID~0 > 0; 177083#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 177085#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 177360#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 195944#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 195942#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 195940#L2759-12 assume !(1 == ~currentHeading~0); 195939#L2769-36 assume !(0 == ~currentFloorID~0); 188345#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 184986#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 188337#L1507-4 assume !(-1 == ~expectedDirection~0); 188332#L1519-4 assume !(1 == ~expectedDirection~0); 188330#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 188328#L1683-2 [2019-12-07 15:59:15,031 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:15,032 INFO L82 PathProgramCache]: Analyzing trace with hash 1360210017, now seen corresponding path program 1 times [2019-12-07 15:59:15,032 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:15,032 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1383083254] [2019-12-07 15:59:15,032 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:15,046 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:15,084 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:15,084 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1383083254] [2019-12-07 15:59:15,085 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:15,085 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:15,085 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2100679911] [2019-12-07 15:59:15,085 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:15,085 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:15,086 INFO L82 PathProgramCache]: Analyzing trace with hash -398220072, now seen corresponding path program 1 times [2019-12-07 15:59:15,086 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:15,086 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1010608517] [2019-12-07 15:59:15,086 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:15,092 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:15,124 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:15,124 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1010608517] [2019-12-07 15:59:15,124 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:15,124 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 15:59:15,125 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1352427502] [2019-12-07 15:59:15,125 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:15,125 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:15,125 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 15:59:15,125 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=14, Invalid=42, Unknown=0, NotChecked=0, Total=56 [2019-12-07 15:59:15,125 INFO L87 Difference]: Start difference. First operand 24208 states and 44624 transitions. cyclomatic complexity: 20417 Second operand 8 states. [2019-12-07 15:59:30,564 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:30,565 INFO L93 Difference]: Finished difference Result 64129 states and 117305 transitions. [2019-12-07 15:59:30,566 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 30 states. [2019-12-07 15:59:30,566 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 64129 states and 117305 transitions. [2019-12-07 15:59:30,771 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 15198 [2019-12-07 15:59:30,902 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 64129 states to 64129 states and 117305 transitions. [2019-12-07 15:59:30,902 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 64129 [2019-12-07 15:59:30,930 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 64129 [2019-12-07 15:59:30,930 INFO L73 IsDeterministic]: Start isDeterministic. Operand 64129 states and 117305 transitions. [2019-12-07 15:59:30,955 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:30,955 INFO L688 BuchiCegarLoop]: Abstraction has 64129 states and 117305 transitions. [2019-12-07 15:59:30,986 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 64129 states and 117305 transitions. [2019-12-07 15:59:31,261 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 64129 to 32035. [2019-12-07 15:59:31,262 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 32035 states. [2019-12-07 15:59:31,303 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 32035 states to 32035 states and 58842 transitions. [2019-12-07 15:59:31,303 INFO L711 BuchiCegarLoop]: Abstraction has 32035 states and 58842 transitions. [2019-12-07 15:59:31,303 INFO L591 BuchiCegarLoop]: Abstraction has 32035 states and 58842 transitions. [2019-12-07 15:59:31,303 INFO L424 BuchiCegarLoop]: ======== Iteration 6============ [2019-12-07 15:59:31,303 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 32035 states and 58842 transitions. [2019-12-07 15:59:31,370 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 7627 [2019-12-07 15:59:31,370 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:31,370 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:31,374 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:31,374 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:31,375 INFO L794 eck$LassoCheckResult]: Stem: 269128#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 269129#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 274400#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 274401#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 268944#L1874 assume 0 != main_~tmp~15; 268945#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 269572#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 269573#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 267446#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 267447#L399 assume 0 == initPersonOnFloor_~floor; 267482#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 266510#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 271176#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 274410#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 274381#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 267022#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 267023#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 273925#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 267832#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 266253#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 266254#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 265708#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 267323#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 274380#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 267933#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 267525#L2161-10 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 266181#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 266182#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 271566#L2969 assume !(0 != timeShift_~tmp___9~3); 266405#L3060 assume !(1 == ~doorState~0); 266406#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 266408#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 266528#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 268525#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 268421#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 267810#L2513-2 assume !(0 == ~currentFloorID~0); 267811#L2519-2 assume ~currentFloorID~0 > 0; 268441#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 268442#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 271031#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 268366#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 265841#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 275401#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 275399#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 269626#L2759 assume !(1 == ~currentHeading~0); 269627#L2769 assume !(0 == ~currentFloorID~0); 269346#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 269305#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 270501#L1507 assume !(-1 == ~expectedDirection~0); 269176#L1519 assume !(1 == ~expectedDirection~0); 268780#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 275628#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 275616#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 275553#L1376-1 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 275554#L1377-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 267938#L2157-12 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 267546#L2178-12 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 273766#L1381-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 266341#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 267308#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 274368#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 267915#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 267477#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 266097#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 266098#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 271575#L2969-1 assume !(0 != timeShift_~tmp___9~3); 266418#L3060-3 assume !(1 == ~doorState~0); 266419#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 266422#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 266537#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 268528#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 268404#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 268405#L2513-8 assume !(0 == ~currentFloorID~0); 275294#L2519-8 assume ~currentFloorID~0 > 0; 268431#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 268432#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 270782#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 268330#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 265828#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 279878#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 279873#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 279870#L2759-3 assume !(1 == ~currentHeading~0); 279863#L2769-9 assume !(0 == ~currentFloorID~0); 279860#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 269282#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 279852#L1507-1 assume !(-1 == ~expectedDirection~0); 279818#L1519-1 assume !(1 == ~expectedDirection~0); 278280#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 278274#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 278272#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 278267#L1376-2 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 278268#L1377-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 267921#L2157-24 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 266104#L2178-24 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 266105#L1381-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 284839#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 284837#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 284838#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 284961#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 284959#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 284821#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 284819#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 284818#L2969-2 assume !(0 != timeShift_~tmp___9~3); 266381#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 266382#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 266397#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 266570#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 268545#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 268547#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 268600#L2513-14 assume !(0 == ~currentFloorID~0); 275268#L2519-14 assume ~currentFloorID~0 > 0; 268401#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 268402#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 270833#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 268309#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 265804#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 280910#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 280908#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 280902#L2759-6 assume !(1 == ~currentHeading~0); 280899#L2769-18 assume !(0 == ~currentFloorID~0); 280892#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 273501#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 280888#L1507-2 assume !(-1 == ~expectedDirection~0); 280885#L1519-2 assume !(1 == ~expectedDirection~0); 280883#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 280882#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 280874#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 280873#L399-1 assume 0 == initPersonOnFloor_~floor; 279844#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 279814#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 279767#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 277966#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 277965#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 277964#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 277963#L1376-3 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 277961#L1377-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 277637#L2157-36 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 266403#L2178-36 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 266404#L1381-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 283694#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 283692#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 283693#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 284221#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 284219#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 283677#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 283670#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 283668#L2969-3 assume !(0 != timeShift_~tmp___9~3); 277383#L3060-9 assume !(1 == ~doorState~0); 286225#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 286222#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 270356#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 268496#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 268497#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 268526#L2513-20 assume !(0 == ~currentFloorID~0); 275305#L2519-20 assume ~currentFloorID~0 > 0; 268555#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 268084#L2534-20 assume ~currentFloorID~0 > 0; 265530#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 265532#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 265789#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 294739#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 294736#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 294737#L2759-9 assume !(1 == ~currentHeading~0); 295862#L2769-27 assume !(0 == ~currentFloorID~0); 295859#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 273482#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 270506#L1507-3 assume !(-1 == ~expectedDirection~0); 270473#L1519-3 assume !(1 == ~expectedDirection~0); 268870#L1520-3 cleanup_~i~2 := 0; 268871#L1683-2 [2019-12-07 15:59:31,375 INFO L796 eck$LassoCheckResult]: Loop: 268871#L1683-2 assume !false; 270514#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 270569#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 295830#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 295829#L1691 assume 1 != cleanup_~tmp___0~4; 269216#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 269217#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 295803#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 273307#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 270825#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 274568#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 275816#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 275817#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 275799#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 275800#L1376-4 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 275843#L1377-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 267730#L2157-48 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 267349#L2178-48 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 273754#L1381-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 265730#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 267315#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 274986#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 279815#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 279816#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 283354#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 283352#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 283350#L2969-4 assume !(0 != timeShift_~tmp___9~3); 266365#L3060-12 assume !(1 == ~doorState~0); 266366#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 266367#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 266948#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 270367#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 268498#L2344-26 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 268500#L702-38 stopRequestedInDirection__wrappee__empty_#t~ret79 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~21 := stopRequestedInDirection__wrappee__empty_#t~ret79;havoc stopRequestedInDirection__wrappee__empty_#t~ret79; 295076#L2348-26 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~21); 295075#L2354-26 assume !(~currentFloorID~0 < 0); 295074#L2369-26 assume ~currentFloorID~0 < 0; 266935#L2371-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 266843#L2372-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 265657#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 295123#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 295080#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 269596#L2759-12 assume !(1 == ~currentHeading~0); 269597#L2769-36 assume !(0 == ~currentFloorID~0); 269451#L2769-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 273129#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 273130#L1507-4 assume !(-1 == ~expectedDirection~0); 295851#L1519-4 assume !(1 == ~expectedDirection~0); 268878#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 268871#L1683-2 [2019-12-07 15:59:31,375 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:31,376 INFO L82 PathProgramCache]: Analyzing trace with hash 2034091003, now seen corresponding path program 1 times [2019-12-07 15:59:31,376 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:31,376 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [980874569] [2019-12-07 15:59:31,376 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:31,391 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:31,424 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:31,424 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [980874569] [2019-12-07 15:59:31,424 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:31,424 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:31,425 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [933027441] [2019-12-07 15:59:31,425 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:31,425 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:31,425 INFO L82 PathProgramCache]: Analyzing trace with hash -1103257724, now seen corresponding path program 1 times [2019-12-07 15:59:31,425 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:31,425 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1028387835] [2019-12-07 15:59:31,425 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:31,430 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:31,461 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:31,461 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1028387835] [2019-12-07 15:59:31,461 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:31,461 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:59:31,461 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1937641768] [2019-12-07 15:59:31,461 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:31,462 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:31,462 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:59:31,462 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:59:31,462 INFO L87 Difference]: Start difference. First operand 32035 states and 58842 transitions. cyclomatic complexity: 26808 Second operand 7 states. [2019-12-07 15:59:37,695 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:37,695 INFO L93 Difference]: Finished difference Result 82488 states and 151622 transitions. [2019-12-07 15:59:37,695 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 14 states. [2019-12-07 15:59:37,696 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 82488 states and 151622 transitions. [2019-12-07 15:59:37,932 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 20198 [2019-12-07 15:59:38,104 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 82488 states to 82488 states and 151622 transitions. [2019-12-07 15:59:38,105 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 82488 [2019-12-07 15:59:38,145 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 82488 [2019-12-07 15:59:38,145 INFO L73 IsDeterministic]: Start isDeterministic. Operand 82488 states and 151622 transitions. [2019-12-07 15:59:38,181 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:38,181 INFO L688 BuchiCegarLoop]: Abstraction has 82488 states and 151622 transitions. [2019-12-07 15:59:38,221 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 82488 states and 151622 transitions. [2019-12-07 15:59:38,541 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 82488 to 39899. [2019-12-07 15:59:38,541 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 39899 states. [2019-12-07 15:59:38,590 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 39899 states to 39899 states and 73330 transitions. [2019-12-07 15:59:38,591 INFO L711 BuchiCegarLoop]: Abstraction has 39899 states and 73330 transitions. [2019-12-07 15:59:38,591 INFO L591 BuchiCegarLoop]: Abstraction has 39899 states and 73330 transitions. [2019-12-07 15:59:38,591 INFO L424 BuchiCegarLoop]: ======== Iteration 7============ [2019-12-07 15:59:38,591 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 39899 states and 73330 transitions. [2019-12-07 15:59:38,672 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 9705 [2019-12-07 15:59:38,672 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:38,672 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:38,676 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:38,676 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:38,676 INFO L794 eck$LassoCheckResult]: Stem: 383774#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 383775#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 389056#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 389057#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 383580#L1874 assume 0 != main_~tmp~15; 383581#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 384241#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 384242#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 382010#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 382011#L399 assume 0 == initPersonOnFloor_~floor; 382044#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 381069#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 385832#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 389067#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 389037#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 381583#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 381584#L1376 assume 1 == __utac_acc__Specification3_spec__1_~tmp___10~0; 388571#L1377 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 < 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 382389#L2157 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 380813#L2178 __utac_acc__Specification3_spec__1_#t~ret44 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___4~0 := __utac_acc__Specification3_spec__1_#t~ret44;havoc __utac_acc__Specification3_spec__1_#t~ret44; 380814#L1381 assume 0 != __utac_acc__Specification3_spec__1_~tmp___4~0;~expectedDirection~0 := 1; 380264#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 381891#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 388135#L128 assume !(0 == isFloorCalling_~floorID); 388069#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 385762#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 385763#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 385942#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 380740#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 386222#L2969 assume !(0 != timeShift_~tmp___9~3); 380964#L3060 assume !(1 == ~doorState~0); 380965#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 380967#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 381088#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 383132#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 383026#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 382367#L2513-2 assume !(0 == ~currentFloorID~0); 382368#L2519-2 assume ~currentFloorID~0 > 0; 383047#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 383048#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 385692#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 382973#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 380397#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 390073#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 390070#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 390071#L2759 assume !(1 == ~currentHeading~0); 383997#L2769 assume !(0 == ~currentFloorID~0); 383998#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 383957#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 390607#L1507 assume !(-1 == ~expectedDirection~0); 390605#L1519 assume !(1 == ~expectedDirection~0); 383537#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 383538#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 381564#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 381565#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 388910#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 390601#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 390673#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 390666#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 390662#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 390660#L2821-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 390661#L128-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 390795#L155-61 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 390793#L2792-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 390794#L2804-1 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 396084#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 396082#L2969-1 assume !(0 != timeShift_~tmp___9~3); 390645#L3060-3 assume !(1 == ~doorState~0); 390644#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 390643#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 390638#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 390637#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 390635#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 390101#L2513-8 assume !(0 == ~currentFloorID~0); 390099#L2519-8 assume ~currentFloorID~0 > 0; 383037#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 383038#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 385443#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 382936#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 380384#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 411462#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 411461#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 384278#L2759-3 assume !(1 == ~currentHeading~0); 383958#L2769-9 assume !(0 == ~currentFloorID~0); 383959#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 383933#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 396953#L1507-1 assume !(-1 == ~expectedDirection~0); 396945#L1519-1 assume !(1 == ~expectedDirection~0); 394802#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 394801#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 394800#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 394798#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 394743#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 394734#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 394723#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 394716#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 394712#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 394710#L2821-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 394708#L128-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 394704#L155-122 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 394701#L2792-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 394700#L2804-2 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 394698#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 394691#L2969-2 assume !(0 != timeShift_~tmp___9~3); 390225#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 390223#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 390220#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 390196#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 390190#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 390191#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 390126#L2513-14 assume !(0 == ~currentFloorID~0); 390124#L2519-14 assume ~currentFloorID~0 > 0; 383007#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 383008#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 385494#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 382912#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 380360#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 389144#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 411456#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 384283#L2759-6 assume !(1 == ~currentHeading~0); 383949#L2769-18 assume !(0 == ~currentFloorID~0); 383950#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 388167#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 397022#L1507-2 assume !(-1 == ~expectedDirection~0); 396949#L1519-2 assume !(1 == ~expectedDirection~0); 393085#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 391759#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 391753#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 391752#L399-1 assume 0 == initPersonOnFloor_~floor; 391736#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 391677#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 391667#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 391665#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 391581#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 391582#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 391572#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 391574#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 393122#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 393110#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 393103#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 393099#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 393097#L2821-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 393098#L128-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 409047#L155-183 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 409045#L2792-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 408830#L2804-3 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 408824#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 408822#L2969-3 assume !(0 != timeShift_~tmp___9~3); 390233#L3060-9 assume !(1 == ~doorState~0); 390231#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 390209#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 390194#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 390187#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 390175#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 390157#L2513-20 assume !(0 == ~currentFloorID~0); 390156#L2519-20 assume ~currentFloorID~0 > 0; 383163#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 382670#L2534-20 assume ~currentFloorID~0 > 0; 380086#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 380088#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 380345#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 411459#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 411457#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 384259#L2759-9 assume !(1 == ~currentHeading~0); 384260#L2769-27 assume !(0 == ~currentFloorID~0); 384229#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 388149#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 401969#L1507-3 assume !(-1 == ~expectedDirection~0); 401962#L1519-3 assume !(1 == ~expectedDirection~0); 401956#L1520-3 cleanup_~i~2 := 0; 401950#L1683-2 [2019-12-07 15:59:38,677 INFO L796 eck$LassoCheckResult]: Loop: 401950#L1683-2 assume !false; 401943#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 401942#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 401941#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 401940#L1691 assume 1 != cleanup_~tmp___0~4; 401939#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 401936#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 401933#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 401932#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 393084#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 391384#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 391231#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 391232#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 391225#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 391226#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 404817#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 391207#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 391196#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 391154#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 391125#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 391113#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 391100#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 391083#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 391081#L2157-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 391076#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 391074#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 391070#L2969-4 assume !(0 != timeShift_~tmp___9~3); 391068#L3060-12 assume !(1 == ~doorState~0); 391066#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 391058#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 391054#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 391050#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 391045#L2344-26 assume 1 == stopRequestedInDirection__wrappee__empty_~dir;isTopFloor_#in~floorID := ~currentFloorID~0;havoc isTopFloor_#res;havoc isTopFloor_~floorID, isTopFloor_~retValue_acc~2;isTopFloor_~floorID := isTopFloor_#in~floorID;havoc isTopFloor_~retValue_acc~2;isTopFloor_~retValue_acc~2 := (if 4 == isTopFloor_~floorID then 1 else 0);isTopFloor_#res := isTopFloor_~retValue_acc~2; 391047#L702-38 stopRequestedInDirection__wrappee__empty_#t~ret79 := isTopFloor_#res;stopRequestedInDirection__wrappee__empty_~tmp~21 := stopRequestedInDirection__wrappee__empty_#t~ret79;havoc stopRequestedInDirection__wrappee__empty_#t~ret79; 391035#L2348-26 assume !(0 != stopRequestedInDirection__wrappee__empty_~tmp~21); 391037#L2354-26 assume !(~currentFloorID~0 < 0); 391027#L2369-26 assume ~currentFloorID~0 < 0; 381495#L2371-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 381403#L2372-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 380213#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 391808#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 391806#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 391800#L2759-12 assume !(1 == ~currentHeading~0); 391798#L2769-36 assume !(0 == ~currentFloorID~0); 390887#L2769-38 assume 1 == ~currentHeading~0;~currentFloorID~0 := 1 + ~currentFloorID~0; 388139#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 401971#L1507-4 assume !(-1 == ~expectedDirection~0); 401966#L1519-4 assume !(1 == ~expectedDirection~0); 401957#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 401950#L1683-2 [2019-12-07 15:59:38,677 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:38,677 INFO L82 PathProgramCache]: Analyzing trace with hash -763790164, now seen corresponding path program 1 times [2019-12-07 15:59:38,677 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:38,677 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1354293676] [2019-12-07 15:59:38,677 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:38,694 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:38,730 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:38,730 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1354293676] [2019-12-07 15:59:38,730 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:38,730 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:38,730 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [706754701] [2019-12-07 15:59:38,731 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:38,731 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:38,731 INFO L82 PathProgramCache]: Analyzing trace with hash 430452275, now seen corresponding path program 1 times [2019-12-07 15:59:38,731 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:38,731 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1297269439] [2019-12-07 15:59:38,731 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:38,737 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:38,760 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:38,760 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1297269439] [2019-12-07 15:59:38,760 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:38,760 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [7] imperfect sequences [] total 7 [2019-12-07 15:59:38,760 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1435682766] [2019-12-07 15:59:38,761 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:38,761 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:38,761 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 7 interpolants. [2019-12-07 15:59:38,761 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=11, Invalid=31, Unknown=0, NotChecked=0, Total=42 [2019-12-07 15:59:38,761 INFO L87 Difference]: Start difference. First operand 39899 states and 73330 transitions. cyclomatic complexity: 33432 Second operand 7 states. [2019-12-07 15:59:40,485 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:40,485 INFO L93 Difference]: Finished difference Result 108436 states and 200569 transitions. [2019-12-07 15:59:40,486 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-12-07 15:59:40,486 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 108436 states and 200569 transitions. [2019-12-07 15:59:40,974 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 27976 [2019-12-07 15:59:41,209 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 108436 states to 108436 states and 200569 transitions. [2019-12-07 15:59:41,209 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 108436 [2019-12-07 15:59:41,259 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 108436 [2019-12-07 15:59:41,260 INFO L73 IsDeterministic]: Start isDeterministic. Operand 108436 states and 200569 transitions. [2019-12-07 15:59:41,303 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:41,303 INFO L688 BuchiCegarLoop]: Abstraction has 108436 states and 200569 transitions. [2019-12-07 15:59:41,352 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 108436 states and 200569 transitions. [2019-12-07 15:59:41,783 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 108436 to 53954. [2019-12-07 15:59:41,783 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 53954 states. [2019-12-07 15:59:41,857 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 53954 states to 53954 states and 99142 transitions. [2019-12-07 15:59:41,857 INFO L711 BuchiCegarLoop]: Abstraction has 53954 states and 99142 transitions. [2019-12-07 15:59:41,858 INFO L591 BuchiCegarLoop]: Abstraction has 53954 states and 99142 transitions. [2019-12-07 15:59:41,858 INFO L424 BuchiCegarLoop]: ======== Iteration 8============ [2019-12-07 15:59:41,858 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 53954 states and 99142 transitions. [2019-12-07 15:59:41,976 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 13391 [2019-12-07 15:59:41,977 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:41,977 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:41,980 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:41,980 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:41,980 INFO L794 eck$LassoCheckResult]: Stem: 532156#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 532157#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 538091#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 538092#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 531942#L1874 assume 0 != main_~tmp~15; 531943#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 532619#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 532620#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 530449#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 530450#L399 assume 0 == initPersonOnFloor_~floor; 530483#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 529483#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 534329#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 538103#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 538072#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 530019#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 530020#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 537846#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 530910#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 529205#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 529206#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 528643#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 530330#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 536964#L128 assume !(0 == isFloorCalling_~floorID); 536875#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 534264#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 534265#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 534468#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 529159#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 534768#L2969 assume !(0 != timeShift_~tmp___9~3); 529376#L3060 assume !(1 == ~doorState~0); 529377#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 529381#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 529502#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 531498#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 531385#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 530792#L2513-2 assume !(0 == ~currentFloorID~0); 530793#L2519-2 assume ~currentFloorID~0 > 0; 531407#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 531408#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 534208#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 531330#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 528820#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 539175#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 539152#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 532670#L2759 assume !(1 == ~currentHeading~0); 532367#L2769 assume !(0 == ~currentFloorID~0); 532368#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 532334#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 533545#L1507 assume !(-1 == ~expectedDirection~0); 532206#L1519 assume !(1 == ~expectedDirection~0); 531761#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 531900#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 530000#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 530001#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 537850#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 530895#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 529118#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 529119#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 528653#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 530314#L2821-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 538738#L128-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 571270#L155-61 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 571268#L2792-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 571269#L2804-1 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 572349#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 572347#L2969-1 assume !(0 != timeShift_~tmp___9~3); 534779#L3060-3 assume !(1 == ~doorState~0); 568371#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 529510#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 529512#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 531500#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 531501#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 540261#L2513-8 assume !(0 == ~currentFloorID~0); 540260#L2519-8 assume ~currentFloorID~0 > 0; 540258#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 540259#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 540276#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 531300#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 528804#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 540291#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 540287#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 532657#L2759-3 assume !(1 == ~currentHeading~0); 532335#L2769-9 assume !(0 == ~currentFloorID~0); 532336#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 532311#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 533547#L1507-1 assume !(-1 == ~expectedDirection~0); 532179#L1519-1 assume !(1 == ~expectedDirection~0); 531763#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 571149#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 571150#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 571124#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 554984#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 571326#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 571322#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 571319#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 571318#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 571317#L2821-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 536866#L128-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 536104#L155-122 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 534882#L2792-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 534438#L2804-2 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 529013#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 538987#L2969-2 assume !(0 != timeShift_~tmp___9~3); 565672#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 565671#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 529545#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 529546#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 565656#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 565657#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 539319#L2513-14 assume !(0 == ~currentFloorID~0); 539318#L2519-14 assume ~currentFloorID~0 > 0; 531368#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 531369#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 536432#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 531278#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 528770#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 540292#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 540289#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 532659#L2759-6 assume !(1 == ~currentHeading~0); 532328#L2769-18 assume !(0 == ~currentFloorID~0); 532329#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 536569#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 533548#L1507-2 assume !(-1 == ~expectedDirection~0); 532182#L1519-2 assume !(1 == ~expectedDirection~0); 531764#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 531867#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 530459#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 530460#L399-1 assume 0 == initPersonOnFloor_~floor; 530441#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 529470#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 534306#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 538102#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 575036#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 570238#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 570239#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 553296#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 538449#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 529357#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 529358#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 575032#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 538740#L2821-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 538741#L128-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 575027#L155-183 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 534891#L2792-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 534892#L2804-3 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 580059#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 580057#L2969-3 assume !(0 != timeShift_~tmp___9~3); 552697#L3060-9 assume !(1 == ~doorState~0); 553262#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 540727#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 540725#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 553251#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 553252#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 539356#L2513-20 assume !(0 == ~currentFloorID~0); 539355#L2519-20 assume ~currentFloorID~0 > 0; 531532#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 531533#L2534-20 assume ~currentFloorID~0 > 0; 528465#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 528467#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 539644#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 539642#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 539640#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 532638#L2759-9 assume !(1 == ~currentHeading~0); 532639#L2769-27 assume !(0 == ~currentFloorID~0); 532605#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 536559#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 533550#L1507-3 assume !(-1 == ~expectedDirection~0); 532188#L1519-3 assume !(1 == ~expectedDirection~0); 531751#L1520-3 cleanup_~i~2 := 0; 531868#L1683-2 [2019-12-07 15:59:41,981 INFO L796 eck$LassoCheckResult]: Loop: 531868#L1683-2 assume !false; 533558#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 533520#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 533521#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 532244#L1691 assume 1 != cleanup_~tmp___0~4; 532245#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 532246#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 534664#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 535756#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 533991#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 538284#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 538385#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 571308#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 571309#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 571305#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 555060#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 530707#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 529311#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 529312#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 528665#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 576019#L2821-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 576020#L128-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 581197#L155-249 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 578837#L2792-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 578831#L2804-4 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 578829#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 578827#L2969-4 assume !(0 != timeShift_~tmp___9~3); 552663#L3060-12 assume !(1 == ~doorState~0); 552664#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 540155#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 540153#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 540001#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 540003#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 539345#L2513-26 assume !(0 == ~currentFloorID~0); 539343#L2519-26 assume ~currentFloorID~0 > 0; 531495#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 531496#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 534519#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 535702#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 539765#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 539762#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 539760#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 532643#L2759-12 assume !(1 == ~currentHeading~0); 532644#L2769-36 assume !(0 == ~currentFloorID~0); 532481#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 536543#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 533551#L1507-4 assume !(-1 == ~expectedDirection~0); 532189#L1519-4 assume !(1 == ~expectedDirection~0); 531756#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 531868#L1683-2 [2019-12-07 15:59:41,981 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:41,981 INFO L82 PathProgramCache]: Analyzing trace with hash -2039250361, now seen corresponding path program 1 times [2019-12-07 15:59:41,981 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:41,982 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1211575836] [2019-12-07 15:59:41,982 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:41,996 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:42,028 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:42,028 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1211575836] [2019-12-07 15:59:42,028 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:42,028 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:42,028 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [768691174] [2019-12-07 15:59:42,029 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:42,029 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:42,029 INFO L82 PathProgramCache]: Analyzing trace with hash -1879190566, now seen corresponding path program 1 times [2019-12-07 15:59:42,029 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:42,029 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [93031240] [2019-12-07 15:59:42,029 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:42,033 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:42,054 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:42,054 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [93031240] [2019-12-07 15:59:42,054 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:42,054 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [6] imperfect sequences [] total 6 [2019-12-07 15:59:42,055 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1297611610] [2019-12-07 15:59:42,055 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:42,055 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:42,055 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 6 interpolants. [2019-12-07 15:59:42,055 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=10, Invalid=20, Unknown=0, NotChecked=0, Total=30 [2019-12-07 15:59:42,056 INFO L87 Difference]: Start difference. First operand 53954 states and 99142 transitions. cyclomatic complexity: 45189 Second operand 6 states. [2019-12-07 15:59:49,024 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:49,024 INFO L93 Difference]: Finished difference Result 117692 states and 216693 transitions. [2019-12-07 15:59:49,025 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 10 states. [2019-12-07 15:59:49,025 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 117692 states and 216693 transitions. [2019-12-07 15:59:49,388 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 29465 [2019-12-07 15:59:49,661 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 117692 states to 117692 states and 216693 transitions. [2019-12-07 15:59:49,661 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 117692 [2019-12-07 15:59:49,720 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 117692 [2019-12-07 15:59:49,720 INFO L73 IsDeterministic]: Start isDeterministic. Operand 117692 states and 216693 transitions. [2019-12-07 15:59:49,771 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:49,771 INFO L688 BuchiCegarLoop]: Abstraction has 117692 states and 216693 transitions. [2019-12-07 15:59:49,830 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 117692 states and 216693 transitions. [2019-12-07 15:59:50,240 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 117692 to 46386. [2019-12-07 15:59:50,240 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 46386 states. [2019-12-07 15:59:50,295 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 46386 states to 46386 states and 84960 transitions. [2019-12-07 15:59:50,295 INFO L711 BuchiCegarLoop]: Abstraction has 46386 states and 84960 transitions. [2019-12-07 15:59:50,295 INFO L591 BuchiCegarLoop]: Abstraction has 46386 states and 84960 transitions. [2019-12-07 15:59:50,295 INFO L424 BuchiCegarLoop]: ======== Iteration 9============ [2019-12-07 15:59:50,296 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 46386 states and 84960 transitions. [2019-12-07 15:59:50,389 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11442 [2019-12-07 15:59:50,389 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:50,389 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:50,391 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:50,392 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:50,392 INFO L794 eck$LassoCheckResult]: Stem: 703702#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 703703#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 709351#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 709352#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 703526#L1874 assume 0 != main_~tmp~15; 703527#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 704172#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 704173#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 702092#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 702093#L399 assume 0 == initPersonOnFloor_~floor; 702126#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 701136#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 705808#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 709361#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 709330#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 701670#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 701671#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 709153#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 702542#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 700858#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 700859#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 700314#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 701975#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 708313#L128 assume !(0 == isFloorCalling_~floorID); 708229#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 705743#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 705744#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 705931#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 700811#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 706208#L2969 assume !(0 != timeShift_~tmp___9~3); 701030#L3060 assume !(1 == ~doorState~0); 701031#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 701033#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 701154#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 703125#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 703017#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 702429#L2513-2 assume !(0 == ~currentFloorID~0); 702430#L2519-2 assume ~currentFloorID~0 > 0; 703037#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 703038#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 705686#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 702963#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 700475#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 710249#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 710212#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 704221#L2759 assume !(1 == ~currentHeading~0); 703912#L2769 assume !(0 == ~currentFloorID~0); 703913#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 703877#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 707954#L1507 assume !(-1 == ~expectedDirection~0); 703748#L1519 assume !(1 == ~expectedDirection~0); 703372#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 709331#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 709332#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 709157#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 709158#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 733695#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 700771#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 700772#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 735124#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 735125#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 735299#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 735319#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 735316#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 735317#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 741614#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 741612#L2969-1 assume !(0 != timeShift_~tmp___9~3); 706220#L3060-3 assume !(1 == ~doorState~0); 701047#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 701048#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 733655#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 703127#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 703003#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 703004#L2513-8 assume !(0 == ~currentFloorID~0); 722404#L2519-8 assume ~currentFloorID~0 > 0; 722403#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 708153#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 708051#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 702933#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 700461#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 709383#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 735322#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 704206#L2759-3 assume !(1 == ~currentHeading~0); 704207#L2769-9 assume !(0 == ~currentFloorID~0); 703880#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 703854#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 741010#L1507-1 assume !(-1 == ~expectedDirection~0); 741004#L1519-1 assume !(1 == ~expectedDirection~0); 740999#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 740997#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 740995#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 740993#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 738609#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 740989#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 740986#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 740976#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 740975#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 740973#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 740974#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 740984#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 740982#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 740957#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 740956#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 740949#L2969-2 assume !(0 != timeShift_~tmp___9~3); 701006#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 701007#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 701022#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 701198#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 703146#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 703147#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 703194#L2513-14 assume !(0 == ~currentFloorID~0); 716702#L2519-14 assume ~currentFloorID~0 > 0; 716700#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 716701#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 716704#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 702908#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 700430#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 731881#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 731882#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 704209#L2759-6 assume !(1 == ~currentHeading~0); 704210#L2769-18 assume !(0 == ~currentFloorID~0); 708357#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 708351#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 740328#L1507-2 assume !(-1 == ~expectedDirection~0); 740325#L1519-2 assume !(1 == ~expectedDirection~0); 740323#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 740322#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 740316#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 740315#L399-1 assume 0 == initPersonOnFloor_~floor; 726376#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 726350#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 726351#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 740223#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 726341#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 726342#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 726337#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 726338#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 740154#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 740149#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 740144#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 740143#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 740141#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 740142#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 740199#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 740198#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 740126#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 740119#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 740117#L2969-3 assume !(0 != timeShift_~tmp___9~3); 701019#L3060-9 assume !(1 == ~doorState~0); 700982#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 700983#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 701577#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 703099#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 703100#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 703126#L2513-20 assume !(0 == ~currentFloorID~0); 710502#L2519-20 assume ~currentFloorID~0 > 0; 703154#L2520-20 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 702682#L2534-20 assume ~currentFloorID~0 > 0; 700136#L2536-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 700138#L2537-20 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 700413#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 729952#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 729953#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 704189#L2759-9 assume !(1 == ~currentHeading~0); 704190#L2769-27 assume !(0 == ~currentFloorID~0); 708350#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 708329#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 735574#L1507-3 assume !(-1 == ~expectedDirection~0); 735570#L1519-3 assume !(1 == ~expectedDirection~0); 727829#L1520-3 cleanup_~i~2 := 0; 727830#L1683-2 [2019-12-07 15:59:50,392 INFO L796 eck$LassoCheckResult]: Loop: 727830#L1683-2 assume !false; 727815#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 727816#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 726192#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 726193#L1691 assume 1 != cleanup_~tmp___0~4; 723771#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 723772#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 723761#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 723762#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 735397#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 723615#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 723616#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 723563#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 723564#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 723551#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 723493#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 735372#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 735359#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 735353#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 735345#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 735346#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 737072#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 737089#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 737088#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 737062#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 737060#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 737058#L2969-4 assume !(0 != timeShift_~tmp___9~3); 700990#L3060-12 assume !(1 == ~doorState~0); 700991#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 700992#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 701596#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 703115#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 703101#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 703102#L2513-26 assume !(0 == ~currentFloorID~0); 710497#L2519-26 assume ~currentFloorID~0 > 0; 703123#L2520-26 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 702659#L2534-26 assume ~currentFloorID~0 > 0; 723281#L2536-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 723679#L2537-26 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 702658#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 723565#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 723566#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 704194#L2759-12 assume !(1 == ~currentHeading~0); 704195#L2769-36 assume !(0 == ~currentFloorID~0); 708333#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 708319#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 727836#L1507-4 assume !(-1 == ~expectedDirection~0); 727837#L1519-4 assume !(1 == ~expectedDirection~0); 727831#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 727830#L1683-2 [2019-12-07 15:59:50,392 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:50,393 INFO L82 PathProgramCache]: Analyzing trace with hash 1588965124, now seen corresponding path program 1 times [2019-12-07 15:59:50,393 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:50,393 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [77383024] [2019-12-07 15:59:50,393 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:50,407 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:50,447 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:50,447 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [77383024] [2019-12-07 15:59:50,447 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:50,447 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:50,448 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [506882864] [2019-12-07 15:59:50,448 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:50,448 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:50,448 INFO L82 PathProgramCache]: Analyzing trace with hash -793502662, now seen corresponding path program 1 times [2019-12-07 15:59:50,449 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:50,449 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [512516052] [2019-12-07 15:59:50,449 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:50,454 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:50,468 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:50,468 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [512516052] [2019-12-07 15:59:50,468 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:50,468 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:59:50,469 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2010078547] [2019-12-07 15:59:50,469 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:50,469 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:50,469 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:59:50,469 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:59:50,469 INFO L87 Difference]: Start difference. First operand 46386 states and 84960 transitions. cyclomatic complexity: 38575 Second operand 5 states. [2019-12-07 15:59:56,406 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 15:59:56,406 INFO L93 Difference]: Finished difference Result 159962 states and 293855 transitions. [2019-12-07 15:59:56,407 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 15:59:56,407 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 159962 states and 293855 transitions. [2019-12-07 15:59:56,890 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 41106 [2019-12-07 15:59:57,245 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 159962 states to 159962 states and 293855 transitions. [2019-12-07 15:59:57,246 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 159962 [2019-12-07 15:59:57,326 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 159962 [2019-12-07 15:59:57,326 INFO L73 IsDeterministic]: Start isDeterministic. Operand 159962 states and 293855 transitions. [2019-12-07 15:59:57,395 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 15:59:57,395 INFO L688 BuchiCegarLoop]: Abstraction has 159962 states and 293855 transitions. [2019-12-07 15:59:57,473 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 159962 states and 293855 transitions. [2019-12-07 15:59:57,983 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 159962 to 47316. [2019-12-07 15:59:57,983 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 47316 states. [2019-12-07 15:59:58,041 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 47316 states to 47316 states and 85987 transitions. [2019-12-07 15:59:58,041 INFO L711 BuchiCegarLoop]: Abstraction has 47316 states and 85987 transitions. [2019-12-07 15:59:58,041 INFO L591 BuchiCegarLoop]: Abstraction has 47316 states and 85987 transitions. [2019-12-07 15:59:58,041 INFO L424 BuchiCegarLoop]: ======== Iteration 10============ [2019-12-07 15:59:58,041 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 47316 states and 85987 transitions. [2019-12-07 15:59:58,138 INFO L131 ngComponentsAnalysis]: Automaton has 1 accepting balls. 11657 [2019-12-07 15:59:58,138 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 15:59:58,138 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 15:59:58,141 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:58,141 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 15:59:58,141 INFO L794 eck$LassoCheckResult]: Stem: 910128#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 910129#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 915871#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 915872#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 909938#L1874 assume 0 != main_~tmp~15; 909939#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 910567#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 910568#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 908467#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 908468#L399 assume 0 == initPersonOnFloor_~floor; 908501#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 907518#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 912266#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 915881#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 915852#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 908037#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 908038#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 915653#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 908926#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 907231#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 907232#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 906681#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 908346#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 914819#L128 assume !(0 == isFloorCalling_~floorID); 914740#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 912201#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 912202#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 912400#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 907186#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 912682#L2969 assume !(0 != timeShift_~tmp___9~3); 907410#L3060 assume !(1 == ~doorState~0); 907411#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 907416#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 907539#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 909527#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 909410#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 908807#L2513-2 assume !(0 == ~currentFloorID~0); 908808#L2519-2 assume ~currentFloorID~0 > 0; 909432#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 909433#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 912145#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 909356#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 906849#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 917023#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 917021#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 910620#L2759 assume !(1 == ~currentHeading~0); 910335#L2769 assume !(0 == ~currentFloorID~0); 910336#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 910339#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 928333#L1507 assume !(-1 == ~expectedDirection~0); 928330#L1519 assume !(1 == ~expectedDirection~0); 928328#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 928327#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 928326#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 928325#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 917044#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 908912#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 907149#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 907150#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 906691#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 908332#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 934168#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 935514#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 908497#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 907096#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 907097#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 912691#L2969-1 assume !(0 != timeShift_~tmp___9~3); 907428#L3060-3 assume !(1 == ~doorState~0); 907429#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 907432#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 907546#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 911387#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 909395#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 909396#L2513-8 assume !(0 == ~currentFloorID~0); 917093#L2519-8 assume ~currentFloorID~0 > 0; 909420#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 909421#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 928525#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 909322#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 906830#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 933239#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 933237#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 910606#L2759-3 assume !(1 == ~currentHeading~0); 910303#L2769-9 assume !(0 == ~currentFloorID~0); 910304#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 910280#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 933233#L1507-1 assume !(-1 == ~expectedDirection~0); 933222#L1519-1 assume !(1 == ~expectedDirection~0); 933212#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 933192#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 933191#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 928468#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 927260#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 908893#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 907063#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 907064#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 906694#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 933300#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 933301#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 933313#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 933310#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 933312#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 950753#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 950746#L2969-2 assume !(0 != timeShift_~tmp___9~3); 907385#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 907386#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 907401#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 907582#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 909547#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 909549#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 909598#L2513-14 assume !(0 == ~currentFloorID~0); 917086#L2519-14 assume ~currentFloorID~0 > 0; 909393#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 909394#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 911934#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 909295#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 906799#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 933240#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 933238#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 910608#L2759-6 assume !(1 == ~currentHeading~0); 910609#L2769-18 assume !(0 == ~currentFloorID~0); 914870#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 914865#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 950663#L1507-2 assume !(-1 == ~expectedDirection~0); 950660#L1519-2 assume !(1 == ~expectedDirection~0); 950658#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 950657#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 950651#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 950650#L399-1 assume 0 == initPersonOnFloor_~floor; 950640#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 950615#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 950612#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 950609#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 950089#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 949871#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 949784#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 927238#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 949782#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 949777#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 947190#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 947189#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 947187#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 947180#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 947178#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 947175#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 947176#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 949344#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 949342#L2969-3 assume !(0 != timeShift_~tmp___9~3); 907398#L3060-9 assume !(1 == ~doorState~0); 907360#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 907361#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 911363#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 911364#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 909525#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 909526#L2513-20 assume !(0 == ~currentFloorID~0); 917135#L2519-20 assume ~currentFloorID~0 > 0; 909557#L2520-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 909558#L128-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 912964#L155-209 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 913827#L2524-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 937462#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 937456#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 934356#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 910587#L2759-9 assume !(1 == ~currentHeading~0); 910588#L2769-27 assume !(0 == ~currentFloorID~0); 910551#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 948257#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 948255#L1507-3 assume !(-1 == ~expectedDirection~0); 948251#L1519-3 assume !(1 == ~expectedDirection~0); 947649#L1520-3 cleanup_~i~2 := 0; 947648#L1683-2 [2019-12-07 15:59:58,141 INFO L796 eck$LassoCheckResult]: Loop: 947648#L1683-2 assume !false; 947647#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 947432#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 947431#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 947430#L1691 assume 1 != cleanup_~tmp___0~4; 947429#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 947426#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 947282#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 947226#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 947211#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 947209#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 947207#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 947205#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 947203#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 947201#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 934412#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 936024#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 936021#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 936018#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 936015#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 935997#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 935989#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 935976#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 935974#L2157-58 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 935967#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 935965#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 935962#L2969-4 assume !(0 != timeShift_~tmp___9~3); 935961#L3060-12 assume !(1 == ~doorState~0); 935960#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 907959#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 907960#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 935948#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 935947#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 935945#L2513-26 assume !(0 == ~currentFloorID~0); 917040#L2519-26 assume ~currentFloorID~0 > 0; 909523#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 909524#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 913568#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 913569#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 917786#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 917782#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 917780#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 910592#L2759-12 assume !(1 == ~currentHeading~0); 910593#L2769-36 assume !(0 == ~currentFloorID~0); 947659#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 947657#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 947654#L1507-4 assume !(-1 == ~expectedDirection~0); 947652#L1519-4 assume !(1 == ~expectedDirection~0); 947650#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 947648#L1683-2 [2019-12-07 15:59:58,142 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:58,142 INFO L82 PathProgramCache]: Analyzing trace with hash 485193025, now seen corresponding path program 1 times [2019-12-07 15:59:58,142 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:58,142 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [442028766] [2019-12-07 15:59:58,142 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:58,156 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:58,192 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:58,193 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [442028766] [2019-12-07 15:59:58,193 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:58,193 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 15:59:58,193 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [617400827] [2019-12-07 15:59:58,193 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 15:59:58,193 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 15:59:58,193 INFO L82 PathProgramCache]: Analyzing trace with hash 13633633, now seen corresponding path program 1 times [2019-12-07 15:59:58,194 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 15:59:58,194 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [655075133] [2019-12-07 15:59:58,194 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 15:59:58,198 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 15:59:58,211 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 15:59:58,212 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [655075133] [2019-12-07 15:59:58,212 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 15:59:58,212 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 15:59:58,212 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [802742430] [2019-12-07 15:59:58,212 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 15:59:58,212 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 15:59:58,212 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 15:59:58,213 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 15:59:58,213 INFO L87 Difference]: Start difference. First operand 47316 states and 85987 transitions. cyclomatic complexity: 38672 Second operand 5 states. [2019-12-07 16:00:05,416 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:00:05,416 INFO L93 Difference]: Finished difference Result 131290 states and 238904 transitions. [2019-12-07 16:00:05,417 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 7 states. [2019-12-07 16:00:05,417 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 131290 states and 238904 transitions. [2019-12-07 16:00:05,798 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 34975 [2019-12-07 16:00:06,091 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 131290 states to 130978 states and 238502 transitions. [2019-12-07 16:00:06,091 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 130978 [2019-12-07 16:00:06,155 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 130978 [2019-12-07 16:00:06,156 INFO L73 IsDeterministic]: Start isDeterministic. Operand 130978 states and 238502 transitions. [2019-12-07 16:00:06,209 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:00:06,209 INFO L688 BuchiCegarLoop]: Abstraction has 130978 states and 238502 transitions. [2019-12-07 16:00:06,272 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 130978 states and 238502 transitions. [2019-12-07 16:00:06,813 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 130978 to 63345. [2019-12-07 16:00:06,813 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 63345 states. [2019-12-07 16:00:06,895 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 63345 states to 63345 states and 115017 transitions. [2019-12-07 16:00:06,895 INFO L711 BuchiCegarLoop]: Abstraction has 63345 states and 115017 transitions. [2019-12-07 16:00:06,895 INFO L591 BuchiCegarLoop]: Abstraction has 63345 states and 115017 transitions. [2019-12-07 16:00:06,896 INFO L424 BuchiCegarLoop]: ======== Iteration 11============ [2019-12-07 16:00:06,896 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 63345 states and 115017 transitions. [2019-12-07 16:00:07,032 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 16342 [2019-12-07 16:00:07,032 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 16:00:07,032 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 16:00:07,035 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:00:07,035 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:00:07,035 INFO L794 eck$LassoCheckResult]: Stem: 1088750#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1088751#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 1094030#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 1094031#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 1088583#L1874 assume 0 != main_~tmp~15; 1088584#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1089181#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1089182#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1087059#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1087060#L399 assume 0 == initPersonOnFloor_~floor; 1087093#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1086123#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1090802#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1094040#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1094011#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1086622#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1086623#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1093870#L1438 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1087529#L2157-5 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1085826#L2178-5 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1085827#L1442 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1085306#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1086941#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1093085#L128 assume !(0 == isFloorCalling_~floorID); 1093021#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1090735#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 1090736#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 1090927#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1085785#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1091205#L2969 assume !(0 != timeShift_~tmp___9~3); 1086012#L3060 assume !(1 == ~doorState~0); 1086013#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1086016#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1086141#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1088160#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1088035#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1087403#L2513-2 assume !(0 == ~currentFloorID~0); 1087404#L2519-2 assume ~currentFloorID~0 > 0; 1088058#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1088059#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1090680#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1087982#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1085457#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1095063#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1094962#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1089230#L2759 assume !(1 == ~currentHeading~0); 1088953#L2769 assume !(0 == ~currentFloorID~0); 1088954#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1088922#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1096094#L1507 assume !(-1 == ~expectedDirection~0); 1096093#L1519 assume !(1 == ~expectedDirection~0); 1096088#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1096089#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1096084#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1096085#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1094938#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1096080#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1085752#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1085753#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1114436#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1114437#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1114423#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1114424#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1114390#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1114391#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1119621#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1119620#L2969-1 assume !(0 != timeShift_~tmp___9~3); 1086030#L3060-3 assume !(1 == ~doorState~0); 1086031#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1086034#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1086150#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1088161#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1088020#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1088021#L2513-8 assume !(0 == ~currentFloorID~0); 1105570#L2519-8 assume ~currentFloorID~0 > 0; 1105571#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1092961#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1092869#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1087951#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1085439#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1123364#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1123365#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1089216#L2759-3 assume !(1 == ~currentHeading~0); 1088923#L2769-9 assume !(0 == ~currentFloorID~0); 1088924#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1088899#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1119050#L1507-1 assume !(-1 == ~expectedDirection~0); 1119047#L1519-1 assume !(1 == ~expectedDirection~0); 1119045#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1119044#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1119043#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1119042#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1101193#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1119034#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1119029#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1119025#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1119024#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1119022#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1119023#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1119059#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1119057#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1118999#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1118998#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1118996#L2969-2 assume !(0 != timeShift_~tmp___9~3); 1118992#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1085999#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1086000#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1086183#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1088178#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1088179#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1111616#L2513-14 assume !(0 == ~currentFloorID~0); 1105566#L2519-14 assume ~currentFloorID~0 > 0; 1088018#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1088019#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1090478#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1087921#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1085413#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1118355#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1118353#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1117442#L2759-6 assume !(1 == ~currentHeading~0); 1088916#L2769-18 assume !(0 == ~currentFloorID~0); 1088917#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1093126#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1128989#L1507-2 assume !(-1 == ~expectedDirection~0); 1128983#L1519-2 assume !(1 == ~expectedDirection~0); 1128979#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1128948#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1128942#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1128941#L399-1 assume 0 == initPersonOnFloor_~floor; 1128917#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1128891#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1128878#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1128857#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1128841#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1128838#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1128835#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1116900#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1094348#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1125017#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1125018#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1128805#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1128797#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1124767#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1124768#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1128543#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1085952#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1085953#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1143120#L2969-3 assume !(0 != timeShift_~tmp___9~3); 1085995#L3060-9 assume !(1 == ~doorState~0); 1085950#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1085951#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1086530#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1088136#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1088137#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1128426#L2513-20 assume !(0 == ~currentFloorID~0); 1128425#L2519-20 assume ~currentFloorID~0 > 0; 1128424#L2520-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1128421#L128-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1128418#L155-209 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1128397#L2524-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1128379#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1128349#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1128346#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1128344#L2759-9 assume !(1 == ~currentHeading~0); 1128341#L2769-27 assume !(0 == ~currentFloorID~0); 1128336#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1128333#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1129016#L1507-3 assume !(-1 == ~expectedDirection~0); 1129009#L1519-3 assume !(1 == ~expectedDirection~0); 1129007#L1520-3 cleanup_~i~2 := 0; 1129006#L1683-2 [2019-12-07 16:00:07,036 INFO L796 eck$LassoCheckResult]: Loop: 1129006#L1683-2 assume !false; 1129005#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1128998#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1128991#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 1128985#L1691 assume 1 != cleanup_~tmp___0~4; 1128980#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1128974#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1128962#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 1128937#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1128890#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1128863#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 1128856#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1128840#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1128837#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1128834#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1107803#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1128823#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1128817#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1128810#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1128804#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1128796#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1093990#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1093991#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1087268#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1085912#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1085913#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1139914#L2969-4 assume !(0 != timeShift_~tmp___9~3); 1085958#L3060-12 assume !(1 == ~doorState~0); 1085959#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1085965#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1086545#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1088148#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1088149#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1107698#L2513-26 assume !(0 == ~currentFloorID~0); 1105597#L2519-26 assume ~currentFloorID~0 > 0; 1088155#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1088156#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1090974#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1087646#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1085373#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1129321#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1129318#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1129045#L2759-12 assume !(1 == ~currentHeading~0); 1129044#L2769-36 assume !(0 == ~currentFloorID~0); 1128306#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1128307#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1129018#L1507-4 assume !(-1 == ~expectedDirection~0); 1129013#L1519-4 assume !(1 == ~expectedDirection~0); 1129008#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 1129006#L1683-2 [2019-12-07 16:00:07,036 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:00:07,036 INFO L82 PathProgramCache]: Analyzing trace with hash 485193025, now seen corresponding path program 2 times [2019-12-07 16:00:07,036 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:00:07,036 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [662441938] [2019-12-07 16:00:07,037 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:00:07,050 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:00:07,080 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:00:07,081 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [662441938] [2019-12-07 16:00:07,081 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:00:07,081 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 16:00:07,081 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1462645685] [2019-12-07 16:00:07,081 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 16:00:07,081 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:00:07,081 INFO L82 PathProgramCache]: Analyzing trace with hash -1897274761, now seen corresponding path program 1 times [2019-12-07 16:00:07,081 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:00:07,082 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1514626070] [2019-12-07 16:00:07,082 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:00:07,086 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:00:07,095 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:00:07,096 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1514626070] [2019-12-07 16:00:07,096 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:00:07,096 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [3] imperfect sequences [] total 3 [2019-12-07 16:00:07,096 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1663518842] [2019-12-07 16:00:07,096 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 16:00:07,096 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 16:00:07,096 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 3 interpolants. [2019-12-07 16:00:07,096 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=3, Invalid=3, Unknown=0, NotChecked=0, Total=6 [2019-12-07 16:00:07,096 INFO L87 Difference]: Start difference. First operand 63345 states and 115017 transitions. cyclomatic complexity: 51674 Second operand 3 states. [2019-12-07 16:00:07,424 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:00:07,424 INFO L93 Difference]: Finished difference Result 87194 states and 158701 transitions. [2019-12-07 16:00:07,425 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 3 states. [2019-12-07 16:00:07,425 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 87194 states and 158701 transitions. [2019-12-07 16:00:07,690 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 22466 [2019-12-07 16:00:07,880 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 87194 states to 87194 states and 158701 transitions. [2019-12-07 16:00:07,880 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 87194 [2019-12-07 16:00:07,929 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 87194 [2019-12-07 16:00:07,929 INFO L73 IsDeterministic]: Start isDeterministic. Operand 87194 states and 158701 transitions. [2019-12-07 16:00:07,969 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:00:07,969 INFO L688 BuchiCegarLoop]: Abstraction has 87194 states and 158701 transitions. [2019-12-07 16:00:08,018 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 87194 states and 158701 transitions. [2019-12-07 16:00:08,500 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 87194 to 85560. [2019-12-07 16:00:08,501 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 85560 states. [2019-12-07 16:00:08,605 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 85560 states to 85560 states and 155835 transitions. [2019-12-07 16:00:08,605 INFO L711 BuchiCegarLoop]: Abstraction has 85560 states and 155835 transitions. [2019-12-07 16:00:08,605 INFO L591 BuchiCegarLoop]: Abstraction has 85560 states and 155835 transitions. [2019-12-07 16:00:08,605 INFO L424 BuchiCegarLoop]: ======== Iteration 12============ [2019-12-07 16:00:08,605 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 85560 states and 155835 transitions. [2019-12-07 16:00:08,782 INFO L131 ngComponentsAnalysis]: Automaton has 2 accepting balls. 21666 [2019-12-07 16:00:08,783 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 16:00:08,783 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 16:00:08,786 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:00:08,786 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:00:08,787 INFO L794 eck$LassoCheckResult]: Stem: 1239328#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1239329#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 1244834#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 1244835#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 1239151#L1874 assume 0 != main_~tmp~15; 1239152#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1239763#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1239764#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1237653#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1237654#L399 assume 0 == initPersonOnFloor_~floor; 1237685#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1236692#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1241424#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1244845#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1244815#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1237203#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1237204#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1244668#L1438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1245076#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1237762#L1459 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1237764#L1470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1235852#L1481 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1235853#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1248537#L2821 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1248536#L128 assume !(0 == isFloorCalling_~floorID); 1248535#L132 assume 1 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_1~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1248531#L155 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 1248523#L2792 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 1248522#L2804 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1248520#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1248519#L2969 assume !(0 != timeShift_~tmp___9~3); 1248518#L3060 assume !(1 == ~doorState~0); 1248517#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1248515#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1248511#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1248510#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1248422#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1248421#L2513-2 assume !(0 == ~currentFloorID~0); 1248420#L2519-2 assume ~currentFloorID~0 > 0; 1248418#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1248414#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1241299#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1241300#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1248358#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1248355#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1248354#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1239815#L2759 assume !(1 == ~currentHeading~0); 1239542#L2769 assume !(0 == ~currentFloorID~0); 1239543#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1246504#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1266900#L1507 assume !(-1 == ~expectedDirection~0); 1254014#L1519 assume !(1 == ~expectedDirection~0); 1238991#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1239117#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1237184#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1237185#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1244671#L1438-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1245162#L1448-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1273849#L1459-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1273848#L1470-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1273847#L1481-1 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1273846#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1273843#L2821-1 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1273844#L128-61 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1273850#L155-61 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 1273828#L2792-1 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 1273827#L2804-1 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1273819#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1273816#L2969-1 assume !(0 != timeShift_~tmp___9~3); 1273817#L3060-3 assume !(1 == ~doorState~0); 1264250#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1264251#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1278798#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1278796#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1278797#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1285259#L2513-8 assume !(0 == ~currentFloorID~0); 1285035#L2519-8 assume ~currentFloorID~0 > 0; 1238631#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1238632#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1263623#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1263624#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1263581#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1263579#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1263571#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1263572#L2759-3 assume !(1 == ~currentHeading~0); 1245807#L2769-9 assume !(0 == ~currentFloorID~0); 1239766#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1277830#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1277828#L1507-1 assume !(-1 == ~expectedDirection~0); 1277822#L1519-1 assume !(1 == ~expectedDirection~0); 1277784#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1277783#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1277782#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1277781#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1260925#L1438-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1269425#L1448-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1269419#L1459-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1269416#L1470-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1269414#L1481-2 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1269413#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1269410#L2821-2 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1269411#L128-122 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1269418#L155-122 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 1269396#L2792-2 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 1269395#L2804-2 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1269393#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1269385#L2969-2 assume !(0 != timeShift_~tmp___9~3); 1269386#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1282636#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1282637#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1311119#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1282414#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1258148#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1258149#L2513-14 assume !(0 == ~currentFloorID~0); 1282317#L2519-14 assume ~currentFloorID~0 > 0; 1282316#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1282314#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1282310#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1250372#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1250373#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1250220#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1250221#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1282205#L2759-6 assume !(1 == ~currentHeading~0); 1283083#L2769-18 assume !(0 == ~currentFloorID~0); 1282075#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1282074#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1282070#L1507-2 assume !(-1 == ~expectedDirection~0); 1282071#L1519-2 assume !(1 == ~expectedDirection~0); 1282066#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1282065#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1282059#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1282058#L399-1 assume 0 == initPersonOnFloor_~floor; 1282048#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1282022#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1279278#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1265180#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1265179#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1265178#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1265177#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1249870#L1438-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1265172#L1448-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1265171#L1459-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1265168#L1470-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1265166#L1481-3 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1265165#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1265163#L2821-3 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1265157#L128-183 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1265153#L155-183 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 1265151#L2792-3 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 1265145#L2804-3 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1265139#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1265136#L2969-3 assume !(0 != timeShift_~tmp___9~3); 1265137#L3060-9 assume !(1 == ~doorState~0); 1289033#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1289029#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1289026#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1289025#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1289022#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1289013#L2513-20 assume !(0 == ~currentFloorID~0); 1289014#L2519-20 assume ~currentFloorID~0 > 0; 1289882#L2520-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1243561#L128-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1242131#L155-209 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1238274#L2524-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1235943#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1285258#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1284995#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1284997#L2759-9 assume !(1 == ~currentHeading~0); 1243876#L2769-27 assume !(0 == ~currentFloorID~0); 1239748#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1297666#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1279204#L1507-3 assume !(-1 == ~expectedDirection~0); 1279206#L1519-3 assume !(1 == ~expectedDirection~0); 1266426#L1520-3 cleanup_~i~2 := 0; 1266423#L1683-2 [2019-12-07 16:00:08,787 INFO L796 eck$LassoCheckResult]: Loop: 1266423#L1683-2 assume !false; 1266422#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1266421#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1266420#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 1266379#L1691 assume 1 != cleanup_~tmp___0~4; 1266378#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1266374#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1263808#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 1263804#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1263742#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1263739#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 1263737#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1258043#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1258044#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1258005#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1254066#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1263736#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1263735#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1263734#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1263733#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1263731#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1263729#L2821-4 assume !(~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4);havoc stopRequestedAtCurrentFloor__wrappee__empty_#res;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95, stopRequestedAtCurrentFloor__wrappee__empty_#t~ret96, stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24, stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;havoc stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp~24;havoc stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;isFloorCalling_#in~floorID := ~currentFloorID~0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1263723#L128-249 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1263716#L155-249 stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95 := isFloorCalling_#res;stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8 := stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95;havoc stopRequestedAtCurrentFloor__wrappee__empty_#t~ret95; 1263712#L2792-4 assume 0 != stopRequestedAtCurrentFloor__wrappee__empty_~tmp___0~8;stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24 := 1;stopRequestedAtCurrentFloor__wrappee__empty_#res := stopRequestedAtCurrentFloor__wrappee__empty_~retValue_acc~24; 1263708#L2804-4 stopRequestedAtCurrentFloor_#t~ret99 := stopRequestedAtCurrentFloor__wrappee__empty_#res;stopRequestedAtCurrentFloor_~retValue_acc~25 := stopRequestedAtCurrentFloor_#t~ret99;havoc stopRequestedAtCurrentFloor_#t~ret99;stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1263706#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1263704#L2969-4 assume !(0 != timeShift_~tmp___9~3); 1263703#L3060-12 assume !(1 == ~doorState~0); 1263702#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1263699#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1263696#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1263694#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1263695#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1269876#L2513-26 assume !(0 == ~currentFloorID~0); 1269877#L2519-26 assume ~currentFloorID~0 > 0; 1238724#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1238725#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1241618#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1242706#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1266593#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1266590#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1266591#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1239787#L2759-12 assume !(1 == ~currentHeading~0); 1239788#L2769-36 assume !(0 == ~currentFloorID~0); 1239649#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1266465#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1266433#L1507-4 assume !(-1 == ~expectedDirection~0); 1266434#L1519-4 assume !(1 == ~expectedDirection~0); 1266427#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 1266423#L1683-2 [2019-12-07 16:00:08,787 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:00:08,787 INFO L82 PathProgramCache]: Analyzing trace with hash -1912779427, now seen corresponding path program 1 times [2019-12-07 16:00:08,787 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:00:08,788 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [307316024] [2019-12-07 16:00:08,788 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:00:08,799 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:00:08,830 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:00:08,831 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [307316024] [2019-12-07 16:00:08,831 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:00:08,831 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 16:00:08,831 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [901225834] [2019-12-07 16:00:08,831 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 16:00:08,832 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:00:08,832 INFO L82 PathProgramCache]: Analyzing trace with hash -1852404292, now seen corresponding path program 1 times [2019-12-07 16:00:08,832 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:00:08,832 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1660566088] [2019-12-07 16:00:08,832 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:00:08,838 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:00:08,892 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:00:08,892 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1660566088] [2019-12-07 16:00:08,893 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:00:08,893 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [10] imperfect sequences [] total 10 [2019-12-07 16:00:08,893 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [2139506138] [2019-12-07 16:00:08,893 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 16:00:08,893 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 16:00:08,893 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 10 interpolants. [2019-12-07 16:00:08,893 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=19, Invalid=71, Unknown=0, NotChecked=0, Total=90 [2019-12-07 16:00:08,893 INFO L87 Difference]: Start difference. First operand 85560 states and 155835 transitions. cyclomatic complexity: 70277 Second operand 10 states. [2019-12-07 16:00:57,271 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:00:57,271 INFO L93 Difference]: Finished difference Result 370127 states and 671627 transitions. [2019-12-07 16:00:57,272 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 46 states. [2019-12-07 16:00:57,272 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 370127 states and 671627 transitions. [2019-12-07 16:00:58,384 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 100940 [2019-12-07 16:00:59,244 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 370127 states to 370127 states and 671627 transitions. [2019-12-07 16:00:59,245 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 370127 [2019-12-07 16:00:59,446 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 370127 [2019-12-07 16:00:59,446 INFO L73 IsDeterministic]: Start isDeterministic. Operand 370127 states and 671627 transitions. [2019-12-07 16:00:59,606 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:00:59,606 INFO L688 BuchiCegarLoop]: Abstraction has 370127 states and 671627 transitions. [2019-12-07 16:00:59,797 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 370127 states and 671627 transitions. [2019-12-07 16:01:01,373 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 370127 to 84483. [2019-12-07 16:01:01,374 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 84483 states. [2019-12-07 16:01:01,477 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 84483 states to 84483 states and 153070 transitions. [2019-12-07 16:01:01,477 INFO L711 BuchiCegarLoop]: Abstraction has 84483 states and 153070 transitions. [2019-12-07 16:01:01,477 INFO L591 BuchiCegarLoop]: Abstraction has 84483 states and 153070 transitions. [2019-12-07 16:01:01,477 INFO L424 BuchiCegarLoop]: ======== Iteration 13============ [2019-12-07 16:01:01,477 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 84483 states and 153070 transitions. [2019-12-07 16:01:01,653 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 21290 [2019-12-07 16:01:01,653 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 16:01:01,653 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 16:01:01,657 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:01,657 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:01,658 INFO L794 eck$LassoCheckResult]: Stem: 1695177#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 1695178#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 1701114#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 1701115#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 1694983#L1874 assume 0 != main_~tmp~15; 1694984#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 1695653#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1695654#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1693441#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1693442#L399 assume 0 == initPersonOnFloor_~floor; 1693475#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1692486#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1697300#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1701124#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1701093#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1692996#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1692997#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1700812#L1438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 1701352#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 1693553#L1459 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 1693555#L1470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 1691650#L1481 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 1691651#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1693324#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1701092#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1693915#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 1693916#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 1694636#L2165-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1694003#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1702557#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1702554#L2969 assume !(0 != timeShift_~tmp___9~3); 1702552#L3060 assume !(1 == ~doorState~0); 1702550#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1702527#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1702523#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1702521#L2697 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1694444#L2344-2 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1693793#L2513-2 assume !(0 == ~currentFloorID~0); 1693794#L2519-2 assume ~currentFloorID~0 > 0; 1702481#L2520-2 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1699985#L128-26 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1699369#L155-26 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1694393#L2524-2 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1691809#L2666-2 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1702882#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1702883#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1702910#L2759 assume !(1 == ~currentHeading~0); 1695392#L2769 assume !(0 == ~currentFloorID~0); 1695393#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1705076#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1705077#L1507 assume !(-1 == ~expectedDirection~0); 1704199#L1519 assume !(1 == ~expectedDirection~0); 1694829#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1701094#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1701095#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1700816#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1700817#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1718730#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1718818#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1718814#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1718815#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1718809#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1718811#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1718885#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 1718879#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1718880#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1740014#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1733794#L2969-1 assume !(0 != timeShift_~tmp___9~3); 1718776#L3060-3 assume !(1 == ~doorState~0); 1718777#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1718773#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1718769#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1718758#L2697-2 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1718760#L2344-8 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1718700#L2513-8 assume !(0 == ~currentFloorID~0); 1718701#L2519-8 assume ~currentFloorID~0 > 0; 1694455#L2520-8 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1694456#L128-87 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1696912#L155-87 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1696913#L2524-8 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1691793#L2666-8 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1735186#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1735185#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1695693#L2759-3 assume !(1 == ~currentHeading~0); 1695355#L2769-9 assume !(0 == ~currentFloorID~0); 1695356#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1695357#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1696595#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1692981#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1692982#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1696566#L1519-1 assume !(1 == ~expectedDirection~0); 1733373#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1733354#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1733355#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1725139#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1704117#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1737095#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1741536#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1741534#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1741535#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1725088#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1725090#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1743682#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 1743516#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1692007#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1692008#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1752707#L2969-2 assume !(0 != timeShift_~tmp___9~3); 1752703#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 1752701#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1692547#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1692548#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1694580#L2697-4 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1694582#L2344-14 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1752685#L2513-14 assume !(0 == ~currentFloorID~0); 1752443#L2519-14 assume ~currentFloorID~0 > 0; 1752318#L2520-14 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1699473#L128-148 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1699474#L155-148 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1694326#L2524-14 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1691762#L2666-14 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1775919#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1775918#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1695695#L2759-6 assume !(1 == ~currentHeading~0); 1695348#L2769-18 assume !(0 == ~currentFloorID~0); 1695349#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1699929#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1748891#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1748889#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1748890#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1748885#L1519-2 assume !(1 == ~expectedDirection~0); 1748883#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 1748882#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 1748876#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 1748875#L399-1 assume 0 == initPersonOnFloor_~floor; 1748865#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 1748840#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 1748837#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 1743529#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1743527#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1743524#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1735982#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1722369#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1693829#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1692353#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1692354#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1701419#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1747237#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1747238#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1752035#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 1752033#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1747222#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1747221#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1744275#L2969-3 assume !(0 != timeShift_~tmp___9~3); 1744272#L3060-9 assume !(1 == ~doorState~0); 1744270#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1744266#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1744258#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1744256#L2697-6 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1744250#L2344-20 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1744246#L2513-20 assume !(0 == ~currentFloorID~0); 1744242#L2519-20 assume ~currentFloorID~0 > 0; 1744237#L2520-20 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1744234#L128-209 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1744231#L155-209 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1744230#L2524-20 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1691743#L2666-20 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1772929#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1772928#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1772927#L2759-9 assume !(1 == ~currentHeading~0); 1699931#L2769-27 assume !(0 == ~currentFloorID~0); 1699924#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1699898#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1756810#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1758262#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1758263#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1758255#L1519-3 assume !(1 == ~expectedDirection~0); 1758251#L1520-3 cleanup_~i~2 := 0; 1758250#L1683-2 [2019-12-07 16:01:01,658 INFO L796 eck$LassoCheckResult]: Loop: 1758250#L1683-2 assume !false; 1758249#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 1758248#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 1758247#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 1758242#L1691 assume 1 != cleanup_~tmp___0~4; 1758240#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1758234#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1758222#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 1758218#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 1758204#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 1758203#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 1758202#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1758201#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1758200#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 1758199#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 1719537#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1758175#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1758172#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 1758170#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 1758134#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 1758118#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 1758119#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 1760094#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 1760092#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 1758100#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 1758101#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 1758096#L2969-4 assume !(0 != timeShift_~tmp___9~3); 1758075#L3060-12 assume !(1 == ~doorState~0); 1758069#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 1758065#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 1758060#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 1758057#L2697-8 assume !(0 != stopRequestedInDirection_~overload~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 1758054#L2344-26 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 1758049#L2513-26 assume !(0 == ~currentFloorID~0); 1758048#L2519-26 assume ~currentFloorID~0 > 0; 1758047#L2520-26 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 1758044#L128-275 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 1758041#L155-275 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 1758040#L2524-26 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 1691720#L2666-26 stopRequestedInDirection_#t~ret93 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret93;havoc stopRequestedInDirection_#t~ret93;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 1757208#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 1757206#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 1757205#L2759-12 assume !(1 == ~currentHeading~0); 1757204#L2769-36 assume !(0 == ~currentFloorID~0); 1699908#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 1699886#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 1756837#L1507-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 1758266#L2192-13 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 1758264#L1511-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 1758258#L1519-4 assume !(1 == ~expectedDirection~0); 1758252#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 1758250#L1683-2 [2019-12-07 16:01:01,658 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:01,658 INFO L82 PathProgramCache]: Analyzing trace with hash -578531390, now seen corresponding path program 1 times [2019-12-07 16:01:01,659 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:01,659 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1428955782] [2019-12-07 16:01:01,659 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:01,671 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:01,703 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:01,703 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1428955782] [2019-12-07 16:01:01,703 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:01,703 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 16:01:01,703 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [833503358] [2019-12-07 16:01:01,704 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 16:01:01,704 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:01,704 INFO L82 PathProgramCache]: Analyzing trace with hash 2068570898, now seen corresponding path program 1 times [2019-12-07 16:01:01,704 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:01,704 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [339148491] [2019-12-07 16:01:01,704 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:01,713 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:01,759 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:01,759 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [339148491] [2019-12-07 16:01:01,759 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:01,759 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 16:01:01,759 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [142233239] [2019-12-07 16:01:01,760 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 16:01:01,760 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 16:01:01,760 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 16:01:01,760 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 16:01:01,760 INFO L87 Difference]: Start difference. First operand 84483 states and 153070 transitions. cyclomatic complexity: 68590 Second operand 5 states. [2019-12-07 16:01:03,265 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:01:03,265 INFO L93 Difference]: Finished difference Result 283507 states and 522853 transitions. [2019-12-07 16:01:03,265 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 6 states. [2019-12-07 16:01:03,266 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 283507 states and 522853 transitions. [2019-12-07 16:01:04,216 INFO L131 ngComponentsAnalysis]: Automaton has 9 accepting balls. 70526 [2019-12-07 16:01:04,930 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 283507 states to 283507 states and 522853 transitions. [2019-12-07 16:01:04,930 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 283507 [2019-12-07 16:01:05,114 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 283507 [2019-12-07 16:01:05,114 INFO L73 IsDeterministic]: Start isDeterministic. Operand 283507 states and 522853 transitions. [2019-12-07 16:01:05,247 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:01:05,247 INFO L688 BuchiCegarLoop]: Abstraction has 283507 states and 522853 transitions. [2019-12-07 16:01:05,409 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 283507 states and 522853 transitions. [2019-12-07 16:01:09,335 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 283507 to 120767. [2019-12-07 16:01:09,335 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 120767 states. [2019-12-07 16:01:09,490 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 120767 states to 120767 states and 216885 transitions. [2019-12-07 16:01:09,491 INFO L711 BuchiCegarLoop]: Abstraction has 120767 states and 216885 transitions. [2019-12-07 16:01:09,491 INFO L591 BuchiCegarLoop]: Abstraction has 120767 states and 216885 transitions. [2019-12-07 16:01:09,491 INFO L424 BuchiCegarLoop]: ======== Iteration 14============ [2019-12-07 16:01:09,491 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 120767 states and 216885 transitions. [2019-12-07 16:01:09,748 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 30247 [2019-12-07 16:01:09,748 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 16:01:09,748 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 16:01:09,752 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:09,752 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:09,753 INFO L794 eck$LassoCheckResult]: Stem: 2063194#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2063195#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 2069114#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 2069115#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 2063005#L1874 assume 0 != main_~tmp~15; 2063006#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2063663#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 2063664#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 2061488#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2061489#L399 assume 0 == initPersonOnFloor_~floor; 2061522#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2060502#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2065377#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2069125#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2069095#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2061043#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2061044#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2068851#L1438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2069400#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2061600#L1459 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2061602#L1470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2059659#L1481 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2059660#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2061371#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2069093#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2069094#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2061565#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2061566#L2165-10 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2060156#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2060157#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2070495#L2969 assume !(0 != timeShift_~tmp___9~3); 2070497#L3060 assume !(1 == ~doorState~0); 2060394#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2060395#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2060521#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2062571#L2697 assume 0 != stopRequestedInDirection_~overload~0; 2062572#L2698 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2071309#L2344 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2071878#L2513 assume !(0 == ~currentFloorID~0); 2071872#L2519 assume ~currentFloorID~0 > 0; 2071858#L2520 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2071842#L128-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2071831#L155-6 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2071812#L2524 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2071813#L2666 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2071784#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2071785#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2076800#L2759 assume !(1 == ~currentHeading~0); 2076794#L2769 assume !(0 == ~currentFloorID~0); 2076791#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2076788#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2076786#L1507 assume !(-1 == ~expectedDirection~0); 2076784#L1519 assume !(1 == ~expectedDirection~0); 2076780#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2076779#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2076778#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2076777#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2070679#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2076774#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2076770#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2076768#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2076767#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2076765#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2076766#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2078990#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2078975#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2076737#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2076738#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2075644#L2969-1 assume !(0 != timeShift_~tmp___9~3); 2075557#L3060-3 assume !(1 == ~doorState~0); 2075553#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2075548#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2075538#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2075535#L2697-2 assume 0 != stopRequestedInDirection_~overload~0; 2075531#L2698-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2075532#L2344-6 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2075694#L2513-6 assume !(0 == ~currentFloorID~0); 2075655#L2519-6 assume ~currentFloorID~0 > 0; 2075611#L2520-6 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2075603#L128-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2075583#L155-67 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2075572#L2524-6 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2075556#L2666-6 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2075551#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2075552#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2082188#L2759-3 assume !(1 == ~currentHeading~0); 2082166#L2769-9 assume !(0 == ~currentFloorID~0); 2082141#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2082138#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2082137#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2082112#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2082109#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2082103#L1519-1 assume !(1 == ~expectedDirection~0); 2082092#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2082088#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2082078#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2082076#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2082073#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2082068#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2082065#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2082062#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2082061#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2081408#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2081409#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2098502#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2093398#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2081361#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2081353#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2080224#L2969-2 assume !(0 != timeShift_~tmp___9~3); 2080222#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2079936#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2079934#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2079930#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2079929#L2697-4 assume 0 != stopRequestedInDirection_~overload~0; 2079927#L2698-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2079928#L2344-12 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2080196#L2513-12 assume !(0 == ~currentFloorID~0); 2080191#L2519-12 assume ~currentFloorID~0 > 0; 2080169#L2520-12 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2080166#L128-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2080145#L155-128 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2080014#L2524-12 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2080006#L2666-12 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2079995#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2079996#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2063702#L2759-6 assume !(1 == ~currentHeading~0); 2063368#L2769-18 assume !(0 == ~currentFloorID~0); 2063369#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2067994#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2119832#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2119831#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2119829#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2119826#L1519-2 assume !(1 == ~expectedDirection~0); 2119824#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 2119823#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 2119817#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2119816#L399-1 assume 0 == initPersonOnFloor_~floor; 2119806#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2119781#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2119778#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2119775#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2119774#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2119773#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2119772#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2073429#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2105111#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2105107#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2105105#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2105104#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2105103#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2104735#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2104731#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2104728#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2104725#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2104714#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2104715#L2969-3 assume !(0 != timeShift_~tmp___9~3); 2104312#L3060-9 assume !(1 == ~doorState~0); 2104311#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2104299#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2104295#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2104293#L2697-6 assume 0 != stopRequestedInDirection_~overload~0; 2104291#L2698-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2104292#L2344-18 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2104332#L2513-18 assume !(0 == ~currentFloorID~0); 2104331#L2519-18 assume ~currentFloorID~0 > 0; 2104329#L2520-18 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2104322#L128-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2104320#L155-189 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2104316#L2524-18 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2104317#L2666-18 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2104554#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2104555#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2142051#L2759-9 assume !(1 == ~currentHeading~0); 2142047#L2769-27 assume !(0 == ~currentFloorID~0); 2142045#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2142043#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2142041#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2142042#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2143565#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2143558#L1519-3 assume !(1 == ~expectedDirection~0); 2143554#L1520-3 cleanup_~i~2 := 0; 2143553#L1683-2 [2019-12-07 16:01:09,753 INFO L796 eck$LassoCheckResult]: Loop: 2143553#L1683-2 assume !false; 2143552#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2143551#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2143550#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 2143549#L1691 assume 1 != cleanup_~tmp___0~4; 2143548#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2143542#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2143526#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 2143521#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2143507#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2143506#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 2143505#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2143504#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2143503#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2143502#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2115144#L1438-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2135641#L1448-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2135638#L1459-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2135635#L1470-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2135632#L1481-4 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2135630#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2135628#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2135616#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2135612#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2135610#L2161-58 assume !(1 == buttonForFloorIsPressed_~floorID); 2135605#L2165-58 assume 2 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_2~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2135603#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2127705#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2127706#L2969-4 assume !(0 != timeShift_~tmp___9~3); 2127700#L3060-12 assume !(1 == ~doorState~0); 2127701#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2127652#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2127650#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2127645#L2697-8 assume 0 != stopRequestedInDirection_~overload~0; 2127646#L2698-8 assume !(0 != stopRequestedInDirection_~buttonPressed~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2129065#L2344-25 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2128033#L2513-25 assume !(0 == ~currentFloorID~0); 2128034#L2519-25 assume ~currentFloorID~0 > 0; 2141431#L2520-25 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2141428#L128-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2141425#L155-265 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2141424#L2524-25 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2141171#L2666-25 stopRequestedInDirection_#t~ret92 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret92;havoc stopRequestedInDirection_#t~ret92;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2141168#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2141096#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2141080#L2759-12 assume !(1 == ~currentHeading~0); 2141074#L2769-36 assume !(0 == ~currentFloorID~0); 2141068#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2141069#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2143567#L1507-4 assume !(-1 == ~expectedDirection~0); 2143562#L1519-4 assume !(1 == ~expectedDirection~0); 2143555#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 2143553#L1683-2 [2019-12-07 16:01:09,753 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:09,753 INFO L82 PathProgramCache]: Analyzing trace with hash 466506291, now seen corresponding path program 1 times [2019-12-07 16:01:09,754 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:09,754 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [496168270] [2019-12-07 16:01:09,754 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:09,766 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:09,798 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:09,798 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [496168270] [2019-12-07 16:01:09,798 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:09,798 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 16:01:09,798 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [344649840] [2019-12-07 16:01:09,799 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 16:01:09,799 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:09,799 INFO L82 PathProgramCache]: Analyzing trace with hash -353522787, now seen corresponding path program 1 times [2019-12-07 16:01:09,799 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:09,799 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [2140518361] [2019-12-07 16:01:09,799 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:09,802 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:09,840 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:09,840 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [2140518361] [2019-12-07 16:01:09,841 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:09,841 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [8] imperfect sequences [] total 8 [2019-12-07 16:01:09,841 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [447013124] [2019-12-07 16:01:09,841 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 16:01:09,841 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 16:01:09,841 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 8 interpolants. [2019-12-07 16:01:09,841 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=15, Invalid=41, Unknown=0, NotChecked=0, Total=56 [2019-12-07 16:01:09,841 INFO L87 Difference]: Start difference. First operand 120767 states and 216885 transitions. cyclomatic complexity: 96121 Second operand 8 states. [2019-12-07 16:01:20,501 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:01:20,501 INFO L93 Difference]: Finished difference Result 303499 states and 546318 transitions. [2019-12-07 16:01:20,501 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 16 states. [2019-12-07 16:01:20,501 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 303499 states and 546318 transitions. [2019-12-07 16:01:21,605 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 79686 [2019-12-07 16:01:22,243 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 303499 states to 303499 states and 546318 transitions. [2019-12-07 16:01:22,243 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 303499 [2019-12-07 16:01:22,385 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 303499 [2019-12-07 16:01:22,386 INFO L73 IsDeterministic]: Start isDeterministic. Operand 303499 states and 546318 transitions. [2019-12-07 16:01:22,507 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:01:22,507 INFO L688 BuchiCegarLoop]: Abstraction has 303499 states and 546318 transitions. [2019-12-07 16:01:22,652 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 303499 states and 546318 transitions. [2019-12-07 16:01:23,888 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 303499 to 153979. [2019-12-07 16:01:23,888 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 153979 states. [2019-12-07 16:01:24,083 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 153979 states to 153979 states and 278549 transitions. [2019-12-07 16:01:24,083 INFO L711 BuchiCegarLoop]: Abstraction has 153979 states and 278549 transitions. [2019-12-07 16:01:24,083 INFO L591 BuchiCegarLoop]: Abstraction has 153979 states and 278549 transitions. [2019-12-07 16:01:24,084 INFO L424 BuchiCegarLoop]: ======== Iteration 15============ [2019-12-07 16:01:24,084 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 153979 states and 278549 transitions. [2019-12-07 16:01:24,554 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 39426 [2019-12-07 16:01:24,554 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 16:01:24,554 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 16:01:24,557 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:24,557 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:24,558 INFO L794 eck$LassoCheckResult]: Stem: 2487461#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 2487462#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 2492663#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 2492664#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 2487292#L1874 assume 0 != main_~tmp~15; 2487293#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 2487954#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 2487955#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 2485745#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2485746#L399 assume 0 == initPersonOnFloor_~floor; 2485779#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2484771#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2489511#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2492673#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2492644#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2485296#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2485297#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2492508#L1438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 2492924#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 2485858#L1459 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 2485860#L1470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 2483963#L1481 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 2483964#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2494270#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2494271#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2486219#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 2486220#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 2486926#L2165-10 assume !(2 == buttonForFloorIsPressed_~floorID); 2486927#L2169-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2484438#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2484439#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2495980#L2969 assume !(0 != timeShift_~tmp___9~3); 2484662#L3060 assume !(1 == ~doorState~0); 2484663#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2484665#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2484790#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2486854#L2697 assume 0 != stopRequestedInDirection_~overload~0; 2486818#L2698 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2486721#L2344 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2486095#L2513 assume !(0 == ~currentFloorID~0); 2486096#L2519 assume ~currentFloorID~0 > 0; 2494712#L2520 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2494700#L128-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2489465#L155-6 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2486669#L2524 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2484098#L2666 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2485625#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2485626#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2495943#L2759 assume !(1 == ~currentHeading~0); 2519146#L2769 assume !(0 == ~currentFloorID~0); 2519140#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2493643#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2520420#L1507 assume !(-1 == ~expectedDirection~0); 2520421#L1519 assume !(1 == ~expectedDirection~0); 2520399#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2520400#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2520391#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2520392#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2495033#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2520383#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2580009#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2580006#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2580007#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2583635#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2583627#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2583626#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 2583622#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2583623#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2606521#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2606522#L2969-1 assume !(0 != timeShift_~tmp___9~3); 2624574#L3060-3 assume !(1 == ~doorState~0); 2624572#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2624568#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2624562#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2624561#L2697-2 assume 0 != stopRequestedInDirection_~overload~0; 2624559#L2698-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2624558#L2344-6 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2624557#L2513-6 assume !(0 == ~currentFloorID~0); 2624556#L2519-6 assume ~currentFloorID~0 > 0; 2624553#L2520-6 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2624547#L128-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2624528#L155-67 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2624455#L2524-6 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2624388#L2666-6 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2624386#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2624385#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2624384#L2759-3 assume !(1 == ~currentHeading~0); 2624382#L2769-9 assume !(0 == ~currentFloorID~0); 2624376#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2518996#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2615337#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2527767#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2615336#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2527111#L1519-1 assume !(1 == ~expectedDirection~0); 2527098#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2527097#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2527096#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2527095#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2517291#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2591803#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2591800#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2591797#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2591799#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2611995#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2492632#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2486170#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 2485728#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2484300#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2484301#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2626231#L2969-2 assume !(0 != timeShift_~tmp___9~3); 2626229#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 2626228#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2626224#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2626217#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2626215#L2697-4 assume 0 != stopRequestedInDirection_~overload~0; 2626212#L2698-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2626211#L2344-12 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2626209#L2513-12 assume !(0 == ~currentFloorID~0); 2626208#L2519-12 assume ~currentFloorID~0 > 0; 2626206#L2520-12 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2626197#L128-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2626193#L155-128 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2626189#L2524-12 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2626110#L2666-12 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2626108#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2626106#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2626104#L2759-6 assume !(1 == ~currentHeading~0); 2626102#L2769-18 assume !(0 == ~currentFloorID~0); 2607697#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2519959#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2607696#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2607222#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2607695#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2606740#L1519-2 assume !(1 == ~expectedDirection~0); 2606738#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 2606706#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 2606698#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 2606694#L399-1 assume 0 == initPersonOnFloor_~floor; 2606501#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 2606462#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 2606455#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 2593912#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2527605#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2527606#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2527108#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2519097#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2593869#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2593866#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2593863#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2593864#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2607173#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2607170#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2607169#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 2607168#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2607164#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2607160#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2607161#L2969-3 assume !(0 != timeShift_~tmp___9~3); 2484647#L3060-9 assume !(1 == ~doorState~0); 2484608#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2484609#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2485205#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2488724#L2697-6 assume 0 != stopRequestedInDirection_~overload~0; 2634982#L2698-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2634981#L2344-18 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2634980#L2513-18 assume !(0 == ~currentFloorID~0); 2634979#L2519-18 assume ~currentFloorID~0 > 0; 2486916#L2520-18 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2486917#L128-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2489931#L155-189 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2486632#L2524-18 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2484037#L2666-18 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2637058#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2636541#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2487974#L2759-9 assume !(1 == ~currentHeading~0); 2487975#L2769-27 assume !(0 == ~currentFloorID~0); 2491777#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2491756#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2625555#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2625454#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2625554#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2625449#L1519-3 assume !(1 == ~expectedDirection~0); 2625427#L1520-3 cleanup_~i~2 := 0; 2625425#L1683-2 [2019-12-07 16:01:24,558 INFO L796 eck$LassoCheckResult]: Loop: 2625425#L1683-2 assume !false; 2625424#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 2625420#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 2625418#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 2625417#L1691 assume 1 != cleanup_~tmp___0~4; 2625416#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2624996#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2624992#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 2624991#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 2624976#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 2624974#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 2527611#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2527612#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2584088#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 2584086#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 2517438#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2584080#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2584046#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 2584047#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 2584027#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 2584028#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 2584015#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 2584012#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 2584007#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 2584009#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 2596296#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 2596276#L2969-4 assume !(0 != timeShift_~tmp___9~3); 2530491#L3060-12 assume !(1 == ~doorState~0); 2530489#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 2530485#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 2530477#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 2530475#L2697-8 assume 0 != stopRequestedInDirection_~overload~0; 2530472#L2698-8 assume !(0 != stopRequestedInDirection_~buttonPressed~0);stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 2530469#L2344-25 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 2530467#L2513-25 assume !(0 == ~currentFloorID~0); 2530465#L2519-25 assume ~currentFloorID~0 > 0; 2530464#L2520-25 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 2530461#L128-265 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 2530458#L155-265 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 2530454#L2524-25 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 2530456#L2666-25 stopRequestedInDirection_#t~ret92 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret92;havoc stopRequestedInDirection_#t~ret92;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 2636546#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 2636545#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 2487979#L2759-12 assume !(1 == ~currentHeading~0); 2487980#L2769-36 assume !(0 == ~currentFloorID~0); 2491761#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 2491751#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 2625463#L1507-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 2625441#L2192-13 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 2625462#L1511-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 2625430#L1519-4 assume !(1 == ~expectedDirection~0); 2625428#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 2625425#L1683-2 [2019-12-07 16:01:24,558 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:24,558 INFO L82 PathProgramCache]: Analyzing trace with hash 932594364, now seen corresponding path program 1 times [2019-12-07 16:01:24,558 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:24,558 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1710786931] [2019-12-07 16:01:24,559 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:24,569 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:24,607 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:24,607 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1710786931] [2019-12-07 16:01:24,607 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:24,607 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 16:01:24,607 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [640088091] [2019-12-07 16:01:24,607 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 16:01:24,607 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:24,607 INFO L82 PathProgramCache]: Analyzing trace with hash -1087157923, now seen corresponding path program 1 times [2019-12-07 16:01:24,608 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:24,608 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1644994851] [2019-12-07 16:01:24,608 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:24,612 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:24,625 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:24,625 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1644994851] [2019-12-07 16:01:24,625 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:24,626 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [5] imperfect sequences [] total 5 [2019-12-07 16:01:24,626 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [1499975990] [2019-12-07 16:01:24,626 INFO L811 eck$LassoCheckResult]: loop already infeasible [2019-12-07 16:01:24,626 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 16:01:24,626 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 5 interpolants. [2019-12-07 16:01:24,626 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=7, Invalid=13, Unknown=0, NotChecked=0, Total=20 [2019-12-07 16:01:24,626 INFO L87 Difference]: Start difference. First operand 153979 states and 278549 transitions. cyclomatic complexity: 124573 Second operand 5 states. [2019-12-07 16:01:27,986 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:01:27,986 INFO L93 Difference]: Finished difference Result 657110 states and 1210341 transitions. [2019-12-07 16:01:27,987 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 9 states. [2019-12-07 16:01:27,987 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 657110 states and 1210341 transitions. [2019-12-07 16:01:30,579 INFO L131 ngComponentsAnalysis]: Automaton has 7 accepting balls. 184644 [2019-12-07 16:01:32,142 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 657110 states to 657110 states and 1210341 transitions. [2019-12-07 16:01:32,142 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 657110 [2019-12-07 16:01:32,505 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 657110 [2019-12-07 16:01:32,505 INFO L73 IsDeterministic]: Start isDeterministic. Operand 657110 states and 1210341 transitions. [2019-12-07 16:01:37,475 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:01:37,475 INFO L688 BuchiCegarLoop]: Abstraction has 657110 states and 1210341 transitions. [2019-12-07 16:01:37,735 INFO L82 GeneralOperation]: Start minimizeSevpa. Operand 657110 states and 1210341 transitions. [2019-12-07 16:01:39,676 INFO L88 GeneralOperation]: Finished minimizeSevpa. Reduced states from 657110 to 154519. [2019-12-07 16:01:39,676 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 154519 states. [2019-12-07 16:01:39,872 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 154519 states to 154519 states and 279179 transitions. [2019-12-07 16:01:39,873 INFO L711 BuchiCegarLoop]: Abstraction has 154519 states and 279179 transitions. [2019-12-07 16:01:39,873 INFO L591 BuchiCegarLoop]: Abstraction has 154519 states and 279179 transitions. [2019-12-07 16:01:39,873 INFO L424 BuchiCegarLoop]: ======== Iteration 16============ [2019-12-07 16:01:39,873 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 154519 states and 279179 transitions. [2019-12-07 16:01:40,191 INFO L131 ngComponentsAnalysis]: Automaton has 3 accepting balls. 39552 [2019-12-07 16:01:40,191 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is false [2019-12-07 16:01:40,191 INFO L119 BuchiIsEmpty]: Starting construction of run [2019-12-07 16:01:40,195 INFO L849 BuchiCegarLoop]: Counterexample stem histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:40,195 INFO L850 BuchiCegarLoop]: Counterexample loop histogram [1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1, 1] [2019-12-07 16:01:40,195 INFO L794 eck$LassoCheckResult]: Stem: 3298674#ULTIMATE.startENTRY #NULL.base, #NULL.offset := 0, 0;#valid := #valid[0 := 0];assume 0 < #StackHeapBarrier;call #t~string19.base, #t~string19.offset := #Ultimate.allocOnStack(30);call #t~string20.base, #t~string20.offset := #Ultimate.allocOnStack(9);call #t~string21.base, #t~string21.offset := #Ultimate.allocOnStack(21);call #t~string22.base, #t~string22.offset := #Ultimate.allocOnStack(30);call #t~string23.base, #t~string23.offset := #Ultimate.allocOnStack(9);call #t~string24.base, #t~string24.offset := #Ultimate.allocOnStack(21);call #t~string28.base, #t~string28.offset := #Ultimate.allocOnStack(30);call #t~string29.base, #t~string29.offset := #Ultimate.allocOnStack(9);call #t~string30.base, #t~string30.offset := #Ultimate.allocOnStack(25);call #t~string31.base, #t~string31.offset := #Ultimate.allocOnStack(30);call #t~string32.base, #t~string32.offset := #Ultimate.allocOnStack(9);call #t~string33.base, #t~string33.offset := #Ultimate.allocOnStack(25);call #t~string123.base, #t~string123.offset := #Ultimate.allocOnStack(10);call #t~string125.base, #t~string125.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string125.base, #t~string125.offset, 1);call write~init~int(95, #t~string125.base, 1 + #t~string125.offset, 1);call write~init~int(93, #t~string125.base, 2 + #t~string125.offset, 1);call write~init~int(0, #t~string125.base, 3 + #t~string125.offset, 1);call #t~string127.base, #t~string127.offset := #Ultimate.allocOnStack(4);call write~init~int(91, #t~string127.base, #t~string127.offset, 1);call write~init~int(93, #t~string127.base, 1 + #t~string127.offset, 1);call write~init~int(32, #t~string127.base, 2 + #t~string127.offset, 1);call write~init~int(0, #t~string127.base, 3 + #t~string127.offset, 1);call #t~string129.base, #t~string129.offset := #Ultimate.allocOnStack(5);call write~init~int(32, #t~string129.base, #t~string129.offset, 1);call write~init~int(97, #t~string129.base, 1 + #t~string129.offset, 1);call write~init~int(116, #t~string129.base, 2 + #t~string129.offset, 1);call write~init~int(32, #t~string129.base, 3 + #t~string129.offset, 1);call write~init~int(0, #t~string129.base, 4 + #t~string129.offset, 1);call #t~string131.base, #t~string131.offset := #Ultimate.allocOnStack(3);call write~init~int(37, #t~string131.base, #t~string131.offset, 1);call write~init~int(105, #t~string131.base, 1 + #t~string131.offset, 1);call write~init~int(0, #t~string131.base, 2 + #t~string131.offset, 1);call #t~string133.base, #t~string133.offset := #Ultimate.allocOnStack(10);call #t~string135.base, #t~string135.offset := #Ultimate.allocOnStack(3);call write~init~int(117, #t~string135.base, #t~string135.offset, 1);call write~init~int(112, #t~string135.base, 1 + #t~string135.offset, 1);call write~init~int(0, #t~string135.base, 2 + #t~string135.offset, 1);call #t~string137.base, #t~string137.offset := #Ultimate.allocOnStack(5);call write~init~int(100, #t~string137.base, #t~string137.offset, 1);call write~init~int(111, #t~string137.base, 1 + #t~string137.offset, 1);call write~init~int(119, #t~string137.base, 2 + #t~string137.offset, 1);call write~init~int(110, #t~string137.base, 3 + #t~string137.offset, 1);call write~init~int(0, #t~string137.base, 4 + #t~string137.offset, 1);call #t~string139.base, #t~string139.offset := #Ultimate.allocOnStack(7);call write~init~int(32, #t~string139.base, #t~string139.offset, 1);call write~init~int(73, #t~string139.base, 1 + #t~string139.offset, 1);call write~init~int(76, #t~string139.base, 2 + #t~string139.offset, 1);call write~init~int(95, #t~string139.base, 3 + #t~string139.offset, 1);call write~init~int(112, #t~string139.base, 4 + #t~string139.offset, 1);call write~init~int(58, #t~string139.base, 5 + #t~string139.offset, 1);call write~init~int(0, #t~string139.base, 6 + #t~string139.offset, 1);call #t~string141.base, #t~string141.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string141.base, #t~string141.offset, 1);call write~init~int(37, #t~string141.base, 1 + #t~string141.offset, 1);call write~init~int(105, #t~string141.base, 2 + #t~string141.offset, 1);call write~init~int(0, #t~string141.base, 3 + #t~string141.offset, 1);call #t~string143.base, #t~string143.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string143.base, #t~string143.offset, 1);call write~init~int(37, #t~string143.base, 1 + #t~string143.offset, 1);call write~init~int(105, #t~string143.base, 2 + #t~string143.offset, 1);call write~init~int(0, #t~string143.base, 3 + #t~string143.offset, 1);call #t~string145.base, #t~string145.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string145.base, #t~string145.offset, 1);call write~init~int(37, #t~string145.base, 1 + #t~string145.offset, 1);call write~init~int(105, #t~string145.base, 2 + #t~string145.offset, 1);call write~init~int(0, #t~string145.base, 3 + #t~string145.offset, 1);call #t~string147.base, #t~string147.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string147.base, #t~string147.offset, 1);call write~init~int(37, #t~string147.base, 1 + #t~string147.offset, 1);call write~init~int(105, #t~string147.base, 2 + #t~string147.offset, 1);call write~init~int(0, #t~string147.base, 3 + #t~string147.offset, 1);call #t~string149.base, #t~string149.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string149.base, #t~string149.offset, 1);call write~init~int(37, #t~string149.base, 1 + #t~string149.offset, 1);call write~init~int(105, #t~string149.base, 2 + #t~string149.offset, 1);call write~init~int(0, #t~string149.base, 3 + #t~string149.offset, 1);call #t~string151.base, #t~string151.offset := #Ultimate.allocOnStack(6);call write~init~int(32, #t~string151.base, #t~string151.offset, 1);call write~init~int(70, #t~string151.base, 1 + #t~string151.offset, 1);call write~init~int(95, #t~string151.base, 2 + #t~string151.offset, 1);call write~init~int(112, #t~string151.base, 3 + #t~string151.offset, 1);call write~init~int(58, #t~string151.base, 4 + #t~string151.offset, 1);call write~init~int(0, #t~string151.base, 5 + #t~string151.offset, 1);call #t~string154.base, #t~string154.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string154.base, #t~string154.offset, 1);call write~init~int(37, #t~string154.base, 1 + #t~string154.offset, 1);call write~init~int(105, #t~string154.base, 2 + #t~string154.offset, 1);call write~init~int(0, #t~string154.base, 3 + #t~string154.offset, 1);call #t~string157.base, #t~string157.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string157.base, #t~string157.offset, 1);call write~init~int(37, #t~string157.base, 1 + #t~string157.offset, 1);call write~init~int(105, #t~string157.base, 2 + #t~string157.offset, 1);call write~init~int(0, #t~string157.base, 3 + #t~string157.offset, 1);call #t~string160.base, #t~string160.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string160.base, #t~string160.offset, 1);call write~init~int(37, #t~string160.base, 1 + #t~string160.offset, 1);call write~init~int(105, #t~string160.base, 2 + #t~string160.offset, 1);call write~init~int(0, #t~string160.base, 3 + #t~string160.offset, 1);call #t~string163.base, #t~string163.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string163.base, #t~string163.offset, 1);call write~init~int(37, #t~string163.base, 1 + #t~string163.offset, 1);call write~init~int(105, #t~string163.base, 2 + #t~string163.offset, 1);call write~init~int(0, #t~string163.base, 3 + #t~string163.offset, 1);call #t~string166.base, #t~string166.offset := #Ultimate.allocOnStack(4);call write~init~int(32, #t~string166.base, #t~string166.offset, 1);call write~init~int(37, #t~string166.base, 1 + #t~string166.offset, 1);call write~init~int(105, #t~string166.base, 2 + #t~string166.offset, 1);call write~init~int(0, #t~string166.base, 3 + #t~string166.offset, 1);call #t~string168.base, #t~string168.offset := #Ultimate.allocOnStack(2);call write~init~int(10, #t~string168.base, #t~string168.offset, 1);call write~init~int(0, #t~string168.base, 1 + #t~string168.offset, 1);~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0;~head~0.base, ~head~0.offset := 0, 0;~weight~0 := 0;~maximumWeight~0 := 100;~cleanupTimeShifts~0 := 12;~expectedDirection~0 := 0;~currentHeading~0 := 1;~currentFloorID~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~doorState~0 := 1;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0; 3298675#L-1 havoc main_#res;havoc main_#t~ret69, main_~retValue_acc~12, main_~tmp~15;havoc main_~retValue_acc~12;havoc main_~tmp~15; 3304844#L732 havoc valid_product_#res;havoc valid_product_~retValue_acc~4;havoc valid_product_~retValue_acc~4;valid_product_~retValue_acc~4 := 1;valid_product_#res := valid_product_~retValue_acc~4; 3304845#L740 main_#t~ret69 := valid_product_#res;main_~tmp~15 := main_#t~ret69;havoc main_#t~ret69; 3298499#L1874 assume 0 != main_~tmp~15; 3298500#L1851 ~currentFloorID~0 := 4;~currentHeading~0 := 0;~floorButtons_0~0 := 0;~floorButtons_1~0 := 0;~floorButtons_2~0 := 0;~floorButtons_3~0 := 0;~floorButtons_4~0 := 0;~persons_0~0 := 0;~persons_1~0 := 0;~persons_2~0 := 0;~persons_3~0 := 0;~persons_4~0 := 0;~persons_5~0 := 0;~calls_0~0 := 0;~calls_1~0 := 0;~calls_2~0 := 0;~calls_3~0 := 0;~calls_4~0 := 0;~personOnFloor_0_0~0 := 0;~personOnFloor_0_1~0 := 0;~personOnFloor_0_2~0 := 0;~personOnFloor_0_3~0 := 0;~personOnFloor_0_4~0 := 0;~personOnFloor_1_0~0 := 0;~personOnFloor_1_1~0 := 0;~personOnFloor_1_2~0 := 0;~personOnFloor_1_3~0 := 0;~personOnFloor_1_4~0 := 0;~personOnFloor_2_0~0 := 0;~personOnFloor_2_1~0 := 0;~personOnFloor_2_2~0 := 0;~personOnFloor_2_3~0 := 0;~personOnFloor_2_4~0 := 0;~personOnFloor_3_0~0 := 0;~personOnFloor_3_1~0 := 0;~personOnFloor_3_2~0 := 0;~personOnFloor_3_3~0 := 0;~personOnFloor_3_4~0 := 0;~personOnFloor_4_0~0 := 0;~personOnFloor_4_1~0 := 0;~personOnFloor_4_2~0 := 0;~personOnFloor_4_3~0 := 0;~personOnFloor_4_4~0 := 0;~personOnFloor_5_0~0 := 0;~personOnFloor_5_1~0 := 0;~personOnFloor_5_2~0 := 0;~personOnFloor_5_3~0 := 0;~personOnFloor_5_4~0 := 0; 3299140#L121 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 3299141#L1256 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 3296933#L1281 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3296934#L399 assume 0 == initPersonOnFloor_~floor; 3296967#L400 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3295922#L507-1 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3300934#L191 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3304854#L203-2 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3304825#L2140 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3296471#L2192 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 3296472#L1376 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3304550#L1438 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0); 3305123#L1448 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 1); 3297045#L1459 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 2); 3297047#L1470 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 3); 3295073#L1481 assume !(__utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 4); 3295074#L1482 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 3296813#L2821 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3306808#L2140-1 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3297407#L2157-10 assume !(0 == buttonForFloorIsPressed_~floorID); 3297408#L2161-10 assume !(1 == buttonForFloorIsPressed_~floorID); 3298138#L2165-10 assume !(2 == buttonForFloorIsPressed_~floorID); 3298139#L2169-10 assume 3 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_3~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3295572#L2178-10 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3295573#L2832 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 3306357#L2969 assume !(0 != timeShift_~tmp___9~3); 3306359#L3060 assume !(1 == ~doorState~0); 3306335#L3060-2 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 3306336#L2724 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3299470#L2745 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 3300008#L2697 assume 0 != stopRequestedInDirection_~overload~0; 3307935#L2698 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 3306263#L2344 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 3307930#L2513 assume !(0 == ~currentFloorID~0); 3307928#L2519 assume ~currentFloorID~0 > 0; 3307925#L2520 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3307926#L128-6 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3307929#L155-6 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 3307922#L2524 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 3307923#L2666 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3307920#L2715 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 3307921#L3068 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 3310464#L2759 assume !(1 == ~currentHeading~0); 3313582#L2769 assume !(0 == ~currentFloorID~0); 3313583#L2769-2 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3313545#L2775-5 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3313546#L1507 assume !(-1 == ~expectedDirection~0); 3313487#L1519 assume !(1 == ~expectedDirection~0); 3313483#L1520 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3313478#L2140-2 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3313479#L2192-3 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 3313475#L1376-1 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3307417#L1438-1 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3313763#L2157-17 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3313756#L2178-17 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3313749#L1442-2 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3313750#L1482-1 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 3313766#L2821-1 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3312663#L2140-3 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3312662#L2157-22 assume !(0 == buttonForFloorIsPressed_~floorID); 3312660#L2161-22 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3312658#L2178-22 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3312642#L2832-1 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 3312643#L2969-1 assume !(0 != timeShift_~tmp___9~3); 3312264#L3060-3 assume !(1 == ~doorState~0); 3312253#L3060-5 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 3312251#L2724-2 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3312242#L2745-2 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 3312520#L2697-2 assume 0 != stopRequestedInDirection_~overload~0; 3312519#L2698-2 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 3312234#L2344-6 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 3312516#L2513-6 assume !(0 == ~currentFloorID~0); 3312510#L2519-6 assume ~currentFloorID~0 > 0; 3312505#L2520-6 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3312506#L128-67 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3312509#L155-67 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 3312502#L2524-6 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 3312503#L2666-6 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3312500#L2715-2 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 3312501#L3068-1 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 3299181#L2759-3 assume !(1 == ~currentHeading~0); 3299182#L2769-9 assume !(0 == ~currentFloorID~0); 3298858#L2769-11 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3298833#L2775-11 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3434301#L1507-1 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3434249#L2192-4 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 3434300#L1511-1 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 3434241#L1519-1 assume !(1 == ~expectedDirection~0); 3434238#L1520-1 havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3434236#L2140-4 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3434234#L2192-6 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 3434232#L1376-2 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3317305#L1438-2 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3420923#L2157-29 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3420920#L2178-29 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3420918#L1442-4 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3420917#L1482-2 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 3420916#L2821-2 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3420902#L2140-5 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3420900#L2157-34 assume !(0 == buttonForFloorIsPressed_~floorID); 3420897#L2161-34 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3420892#L2178-34 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3420891#L2832-2 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 3420890#L2969-2 assume !(0 != timeShift_~tmp___9~3); 3343195#L3060-6 assume 1 == ~doorState~0;~doorState~0 := 0; 3343176#L3060-8 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 3343174#L2724-4 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3343166#L2745-4 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 3343193#L2697-4 assume 0 != stopRequestedInDirection_~overload~0; 3343192#L2698-4 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 3343158#L2344-12 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 3343191#L2513-12 assume !(0 == ~currentFloorID~0); 3343190#L2519-12 assume ~currentFloorID~0 > 0; 3343188#L2520-12 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3343189#L128-128 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3343416#L155-128 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 3343411#L2524-12 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 3343413#L2666-12 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3343442#L2715-4 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 3343443#L3068-2 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 3299185#L2759-6 assume !(1 == ~currentHeading~0); 3298850#L2769-18 assume !(0 == ~currentFloorID~0); 3298851#L2769-20 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3303658#L2775-17 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3422850#L1507-2 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3420733#L2192-7 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 3421538#L1511-2 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 3420729#L1519-2 assume !(1 == ~expectedDirection~0); 3420727#L1520-2 havoc bobCall_#t~ret57, bobCall_~tmp~7;havoc bobCall_~tmp~7;getOrigin_#in~person := 0;havoc getOrigin_#res;havoc getOrigin_~person, getOrigin_~retValue_acc~9;getOrigin_~person := getOrigin_#in~person;havoc getOrigin_~retValue_acc~9; 3420726#L1256-1 assume 0 == getOrigin_~person;getOrigin_~retValue_acc~9 := 4;getOrigin_#res := getOrigin_~retValue_acc~9; 3420689#L1281-1 bobCall_#t~ret57 := getOrigin_#res;bobCall_~tmp~7 := bobCall_#t~ret57;havoc bobCall_#t~ret57;initPersonOnFloor_#in~person, initPersonOnFloor_#in~floor := 0, bobCall_~tmp~7;havoc initPersonOnFloor_~person, initPersonOnFloor_~floor;initPersonOnFloor_~person := initPersonOnFloor_#in~person;initPersonOnFloor_~floor := initPersonOnFloor_#in~floor; 3420687#L399-1 assume 0 == initPersonOnFloor_~floor; 3420669#L400-2 assume 0 == initPersonOnFloor_~person;~personOnFloor_0_0~0 := 1; 3420644#L507-3 callOnFloor_#in~floorID := initPersonOnFloor_~floor;havoc callOnFloor_~floorID;callOnFloor_~floorID := callOnFloor_#in~floorID; 3420641#L191-2 assume 0 == callOnFloor_~floorID;~calls_0~0 := 1; 3420638#L203-5 havoc cleanup_#t~ret63, cleanup_#t~ret64, cleanup_~i~2, cleanup_~tmp~13, cleanup_~tmp___0~4, cleanup_~__cil_tmp4~2;havoc cleanup_~i~2;havoc cleanup_~tmp~13;havoc cleanup_~tmp___0~4;havoc cleanup_~__cil_tmp4~2;havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3420637#L2140-6 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3420636#L2192-9 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 3419249#L1376-3 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3338449#L1438-3 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3419204#L2157-41 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3419196#L2178-41 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3419194#L1442-6 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3419193#L1482-3 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 3419192#L2821-3 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3419182#L2140-7 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3419177#L2157-46 assume !(0 == buttonForFloorIsPressed_~floorID); 3419175#L2161-46 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3419169#L2178-46 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3419167#L2832-3 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 3419166#L2969-3 assume !(0 != timeShift_~tmp___9~3); 3339840#L3060-9 assume !(1 == ~doorState~0); 3339829#L3060-11 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 3339827#L2724-6 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3339818#L2745-6 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 3341095#L2697-6 assume 0 != stopRequestedInDirection_~overload~0; 3341094#L2698-6 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 3339810#L2344-18 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 3341093#L2513-18 assume !(0 == ~currentFloorID~0); 3341091#L2519-18 assume ~currentFloorID~0 > 0; 3341090#L2520-18 assume 0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3341068#L128-189 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3341046#L155-189 stopRequestedInDirection__wrappee__empty_#t~ret85 := isFloorCalling_#res;stopRequestedInDirection__wrappee__empty_~tmp___9~1 := stopRequestedInDirection__wrappee__empty_#t~ret85;havoc stopRequestedInDirection__wrappee__empty_#t~ret85; 3341033#L2524-18 assume 0 != stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 3340964#L2666-18 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3340962#L2715-6 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 3340963#L3068-3 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 3299162#L2759-9 assume !(1 == ~currentHeading~0); 3299163#L2769-27 assume !(0 == ~currentFloorID~0); 3303647#L2769-29 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3303623#L2775-23 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3425053#L1507-3 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3424090#L2192-10 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 3425051#L1511-3 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 3424085#L1519-3 assume !(1 == ~expectedDirection~0); 3424057#L1520-3 cleanup_~i~2 := 0; 3424056#L1683-2 [2019-12-07 16:01:40,196 INFO L796 eck$LassoCheckResult]: Loop: 3424056#L1683-2 assume !false; 3424053#L1684 cleanup_~__cil_tmp4~2 := ~cleanupTimeShifts~0 - 1; 3424050#L1687 assume cleanup_~i~2 < cleanup_~__cil_tmp4~2;havoc isBlocked_#res;havoc isBlocked_~retValue_acc~13;havoc isBlocked_~retValue_acc~13;isBlocked_~retValue_acc~13 := 0;isBlocked_#res := isBlocked_~retValue_acc~13; 3424048#L1967 cleanup_#t~ret63 := isBlocked_#res;cleanup_~tmp___0~4 := cleanup_#t~ret63;havoc cleanup_#t~ret63; 3424046#L1691 assume 1 != cleanup_~tmp___0~4; 3424044#L1691-1 havoc isIdle_#res;havoc isIdle_#t~ret78, isIdle_~retValue_acc~20, isIdle_~tmp~20;havoc isIdle_~retValue_acc~20;havoc isIdle_~tmp~20;havoc anyStopRequested_#res;havoc anyStopRequested_#t~ret73, anyStopRequested_#t~ret74, anyStopRequested_#t~ret75, anyStopRequested_#t~ret76, anyStopRequested_#t~ret77, anyStopRequested_~retValue_acc~19, anyStopRequested_~tmp~19, anyStopRequested_~tmp___0~6, anyStopRequested_~tmp___1~4, anyStopRequested_~tmp___2~2, anyStopRequested_~tmp___3~1;havoc anyStopRequested_~retValue_acc~19;havoc anyStopRequested_~tmp~19;havoc anyStopRequested_~tmp___0~6;havoc anyStopRequested_~tmp___1~4;havoc anyStopRequested_~tmp___2~2;havoc anyStopRequested_~tmp___3~1;isFloorCalling_#in~floorID := 0;havoc isFloorCalling_#res;havoc isFloorCalling_~floorID, isFloorCalling_~retValue_acc~0;isFloorCalling_~floorID := isFloorCalling_#in~floorID;havoc isFloorCalling_~retValue_acc~0; 3424033#L128-244 assume 0 == isFloorCalling_~floorID;isFloorCalling_~retValue_acc~0 := ~calls_0~0;isFloorCalling_#res := isFloorCalling_~retValue_acc~0; 3424029#L155-244 anyStopRequested_#t~ret73 := isFloorCalling_#res;anyStopRequested_~tmp___3~1 := anyStopRequested_#t~ret73;havoc anyStopRequested_#t~ret73; 3424014#L2248 assume 0 != anyStopRequested_~tmp___3~1;anyStopRequested_~retValue_acc~19 := 1;anyStopRequested_#res := anyStopRequested_~retValue_acc~19; 3423999#L2312 isIdle_#t~ret78 := anyStopRequested_#res;isIdle_~tmp~20 := isIdle_#t~ret78;havoc isIdle_#t~ret78;isIdle_~retValue_acc~20 := (if 0 == isIdle_~tmp~20 then 1 else 0);isIdle_#res := isIdle_~retValue_acc~20; 3423997#L2325 cleanup_#t~ret64 := isIdle_#res;cleanup_~tmp~13 := cleanup_#t~ret64;havoc cleanup_#t~ret64; 3423995#L1703 assume !(0 != cleanup_~tmp~13);havoc timeShift_#t~ret112, timeShift_#t~ret113, timeShift_#t~ret114, timeShift_#t~ret115, timeShift_#t~ret116, timeShift_#t~ret117, timeShift_#t~ret118, timeShift_#t~ret119, timeShift_#t~ret120, timeShift_#t~ret121, timeShift_#t~ret122, timeShift_~tmp~27, timeShift_~tmp___0~11, timeShift_~tmp___1~7, timeShift_~tmp___2~5, timeShift_~tmp___3~4, timeShift_~tmp___4~3, timeShift_~tmp___5~3, timeShift_~tmp___6~3, timeShift_~tmp___7~3, timeShift_~tmp___8~3, timeShift_~tmp___9~3;havoc timeShift_~tmp~27;havoc timeShift_~tmp___0~11;havoc timeShift_~tmp___1~7;havoc timeShift_~tmp___2~5;havoc timeShift_~tmp___3~4;havoc timeShift_~tmp___4~3;havoc timeShift_~tmp___5~3;havoc timeShift_~tmp___6~3;havoc timeShift_~tmp___7~3;havoc timeShift_~tmp___8~3;havoc timeShift_~tmp___9~3;havoc __utac_acc__Specification3_spec__1_#t~ret42, __utac_acc__Specification3_spec__1_#t~ret43, __utac_acc__Specification3_spec__1_#t~ret44, __utac_acc__Specification3_spec__1_#t~ret45, __utac_acc__Specification3_spec__1_#t~ret46, __utac_acc__Specification3_spec__1_#t~ret47, __utac_acc__Specification3_spec__1_#t~ret48, __utac_acc__Specification3_spec__1_#t~ret49, __utac_acc__Specification3_spec__1_#t~ret50, __utac_acc__Specification3_spec__1_#t~ret51, __utac_acc__Specification3_spec__1_#t~ret52, __utac_acc__Specification3_spec__1_#t~ret53, __utac_acc__Specification3_spec__1_~currentFloorID___0~0, __utac_acc__Specification3_spec__1_~tmp~5, __utac_acc__Specification3_spec__1_~tmp___0~2, __utac_acc__Specification3_spec__1_~tmp___1~2, __utac_acc__Specification3_spec__1_~tmp___2~0, __utac_acc__Specification3_spec__1_~tmp___3~0, __utac_acc__Specification3_spec__1_~tmp___4~0, __utac_acc__Specification3_spec__1_~tmp___5~0, __utac_acc__Specification3_spec__1_~tmp___6~0, __utac_acc__Specification3_spec__1_~tmp___7~0, __utac_acc__Specification3_spec__1_~tmp___8~0, __utac_acc__Specification3_spec__1_~tmp___9~0, __utac_acc__Specification3_spec__1_~tmp___10~0;havoc __utac_acc__Specification3_spec__1_~currentFloorID___0~0;havoc __utac_acc__Specification3_spec__1_~tmp~5;havoc __utac_acc__Specification3_spec__1_~tmp___0~2;havoc __utac_acc__Specification3_spec__1_~tmp___1~2;havoc __utac_acc__Specification3_spec__1_~tmp___2~0;havoc __utac_acc__Specification3_spec__1_~tmp___3~0;havoc __utac_acc__Specification3_spec__1_~tmp___4~0;havoc __utac_acc__Specification3_spec__1_~tmp___5~0;havoc __utac_acc__Specification3_spec__1_~tmp___6~0;havoc __utac_acc__Specification3_spec__1_~tmp___7~0;havoc __utac_acc__Specification3_spec__1_~tmp___8~0;havoc __utac_acc__Specification3_spec__1_~tmp___9~0;havoc __utac_acc__Specification3_spec__1_~tmp___10~0;~expectedDirection~0 := 0;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3423993#L2140-8 __utac_acc__Specification3_spec__1_#t~ret42 := getCurrentFloorID_#res;__utac_acc__Specification3_spec__1_~tmp~5 := __utac_acc__Specification3_spec__1_#t~ret42;havoc __utac_acc__Specification3_spec__1_#t~ret42;__utac_acc__Specification3_spec__1_~currentFloorID___0~0 := __utac_acc__Specification3_spec__1_~tmp~5;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3423991#L2192-12 __utac_acc__Specification3_spec__1_#t~ret43 := getCurrentHeading_#res;__utac_acc__Specification3_spec__1_~tmp___10~0 := __utac_acc__Specification3_spec__1_#t~ret43;havoc __utac_acc__Specification3_spec__1_#t~ret43; 3423989#L1376-4 assume !(1 == __utac_acc__Specification3_spec__1_~tmp___10~0); 3331900#L1438-4 assume __utac_acc__Specification3_spec__1_~currentFloorID___0~0 > 0;buttonForFloorIsPressed_#in~floorID := 0;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3414913#L2157-53 assume 0 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_0~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3414910#L2178-53 __utac_acc__Specification3_spec__1_#t~ret49 := buttonForFloorIsPressed_#res;__utac_acc__Specification3_spec__1_~tmp___9~0 := __utac_acc__Specification3_spec__1_#t~ret49;havoc __utac_acc__Specification3_spec__1_#t~ret49; 3414908#L1442-8 assume 0 != __utac_acc__Specification3_spec__1_~tmp___9~0;~expectedDirection~0 := -1; 3414907#L1482-4 havoc stopRequestedAtCurrentFloor_#res;havoc stopRequestedAtCurrentFloor_#t~ret97, stopRequestedAtCurrentFloor_#t~ret98, stopRequestedAtCurrentFloor_#t~ret99, stopRequestedAtCurrentFloor_~retValue_acc~25, stopRequestedAtCurrentFloor_~tmp~25, stopRequestedAtCurrentFloor_~tmp___0~9, stopRequestedAtCurrentFloor_~__cil_tmp4~3, stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc stopRequestedAtCurrentFloor_~retValue_acc~25;havoc stopRequestedAtCurrentFloor_~tmp~25;havoc stopRequestedAtCurrentFloor_~tmp___0~9;havoc stopRequestedAtCurrentFloor_~__cil_tmp4~3;havoc stopRequestedAtCurrentFloor_~__cil_tmp5~4;stopRequestedAtCurrentFloor_~__cil_tmp4~3 := 2 * ~maximumWeight~0;stopRequestedAtCurrentFloor_~__cil_tmp5~4 := (if stopRequestedAtCurrentFloor_~__cil_tmp4~3 < 0 && 0 != stopRequestedAtCurrentFloor_~__cil_tmp4~3 % 3 then 1 + stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3 else stopRequestedAtCurrentFloor_~__cil_tmp4~3 / 3); 3414901#L2821-4 assume ~weight~0 > stopRequestedAtCurrentFloor_~__cil_tmp5~4;havoc getCurrentFloorID_#res;havoc getCurrentFloorID_~retValue_acc~14;havoc getCurrentFloorID_~retValue_acc~14;getCurrentFloorID_~retValue_acc~14 := ~currentFloorID~0;getCurrentFloorID_#res := getCurrentFloorID_~retValue_acc~14; 3414875#L2140-9 stopRequestedAtCurrentFloor_#t~ret97 := getCurrentFloorID_#res;stopRequestedAtCurrentFloor_~tmp~25 := stopRequestedAtCurrentFloor_#t~ret97;havoc stopRequestedAtCurrentFloor_#t~ret97;buttonForFloorIsPressed_#in~floorID := stopRequestedAtCurrentFloor_~tmp~25;havoc buttonForFloorIsPressed_#res;havoc buttonForFloorIsPressed_~floorID, buttonForFloorIsPressed_~retValue_acc~16;buttonForFloorIsPressed_~floorID := buttonForFloorIsPressed_#in~floorID;havoc buttonForFloorIsPressed_~retValue_acc~16; 3414873#L2157-58 assume !(0 == buttonForFloorIsPressed_~floorID); 3414870#L2161-58 assume 1 == buttonForFloorIsPressed_~floorID;buttonForFloorIsPressed_~retValue_acc~16 := ~floorButtons_1~0;buttonForFloorIsPressed_#res := buttonForFloorIsPressed_~retValue_acc~16; 3414865#L2178-58 stopRequestedAtCurrentFloor_#t~ret98 := buttonForFloorIsPressed_#res;stopRequestedAtCurrentFloor_~tmp___0~9 := stopRequestedAtCurrentFloor_#t~ret98;havoc stopRequestedAtCurrentFloor_#t~ret98;stopRequestedAtCurrentFloor_~retValue_acc~25 := (if 1 == stopRequestedAtCurrentFloor_~tmp___0~9 then 1 else 0);stopRequestedAtCurrentFloor_#res := stopRequestedAtCurrentFloor_~retValue_acc~25; 3414864#L2832-4 timeShift_#t~ret112 := stopRequestedAtCurrentFloor_#res;timeShift_~tmp___9~3 := timeShift_#t~ret112;havoc timeShift_#t~ret112; 3414863#L2969-4 assume !(0 != timeShift_~tmp___9~3); 3342524#L3060-12 assume !(1 == ~doorState~0); 3342513#L3060-14 stopRequestedInDirection_#in~dir, stopRequestedInDirection_#in~respectFloorCalls, stopRequestedInDirection_#in~respectInLiftCalls := ~currentHeading~0, 1, 1;havoc stopRequestedInDirection_#res;havoc stopRequestedInDirection_#t~ret90, stopRequestedInDirection_#t~ret91, stopRequestedInDirection_#t~ret92, stopRequestedInDirection_#t~ret93, stopRequestedInDirection_~dir, stopRequestedInDirection_~respectFloorCalls, stopRequestedInDirection_~respectInLiftCalls, stopRequestedInDirection_~retValue_acc~22, stopRequestedInDirection_~overload~0, stopRequestedInDirection_~buttonPressed~0, stopRequestedInDirection_~tmp~22, stopRequestedInDirection_~__cil_tmp8~5, stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~dir := stopRequestedInDirection_#in~dir;stopRequestedInDirection_~respectFloorCalls := stopRequestedInDirection_#in~respectFloorCalls;stopRequestedInDirection_~respectInLiftCalls := stopRequestedInDirection_#in~respectInLiftCalls;havoc stopRequestedInDirection_~retValue_acc~22;havoc stopRequestedInDirection_~overload~0;havoc stopRequestedInDirection_~buttonPressed~0;havoc stopRequestedInDirection_~tmp~22;havoc stopRequestedInDirection_~__cil_tmp8~5;havoc stopRequestedInDirection_~__cil_tmp9~5;stopRequestedInDirection_~__cil_tmp8~5 := 2 * ~maximumWeight~0;stopRequestedInDirection_~__cil_tmp9~5 := (if stopRequestedInDirection_~__cil_tmp8~5 < 0 && 0 != stopRequestedInDirection_~__cil_tmp8~5 % 3 then 1 + stopRequestedInDirection_~__cil_tmp8~5 / 3 else stopRequestedInDirection_~__cil_tmp8~5 / 3);stopRequestedInDirection_~overload~0 := (if ~weight~0 > stopRequestedInDirection_~__cil_tmp9~5 then 1 else 0);havoc isAnyLiftButtonPressed_#res;havoc isAnyLiftButtonPressed_~retValue_acc~23;havoc isAnyLiftButtonPressed_~retValue_acc~23; 3342511#L2724-8 assume 0 != ~floorButtons_0~0;isAnyLiftButtonPressed_~retValue_acc~23 := 1;isAnyLiftButtonPressed_#res := isAnyLiftButtonPressed_~retValue_acc~23; 3342502#L2745-8 stopRequestedInDirection_#t~ret90 := isAnyLiftButtonPressed_#res;stopRequestedInDirection_~tmp~22 := stopRequestedInDirection_#t~ret90;havoc stopRequestedInDirection_#t~ret90;stopRequestedInDirection_~buttonPressed~0 := stopRequestedInDirection_~tmp~22; 3342830#L2697-8 assume 0 != stopRequestedInDirection_~overload~0; 3342829#L2698-8 assume 0 != stopRequestedInDirection_~buttonPressed~0;stopRequestedInDirection__wrappee__empty_#in~dir, stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls, stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls := stopRequestedInDirection_~dir, 0, stopRequestedInDirection_~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_#res;havoc stopRequestedInDirection__wrappee__empty_#t~ret79, stopRequestedInDirection__wrappee__empty_#t~ret80, stopRequestedInDirection__wrappee__empty_#t~ret81, stopRequestedInDirection__wrappee__empty_#t~ret82, stopRequestedInDirection__wrappee__empty_#t~ret83, stopRequestedInDirection__wrappee__empty_#t~ret84, stopRequestedInDirection__wrappee__empty_#t~ret85, stopRequestedInDirection__wrappee__empty_#t~ret86, stopRequestedInDirection__wrappee__empty_#t~ret87, stopRequestedInDirection__wrappee__empty_#t~ret88, stopRequestedInDirection__wrappee__empty_#t~ret89, stopRequestedInDirection__wrappee__empty_~dir, stopRequestedInDirection__wrappee__empty_~respectFloorCalls, stopRequestedInDirection__wrappee__empty_~respectInLiftCalls, stopRequestedInDirection__wrappee__empty_~retValue_acc~21, stopRequestedInDirection__wrappee__empty_~tmp~21, stopRequestedInDirection__wrappee__empty_~tmp___0~7, stopRequestedInDirection__wrappee__empty_~tmp___1~5, stopRequestedInDirection__wrappee__empty_~tmp___2~3, stopRequestedInDirection__wrappee__empty_~tmp___3~2, stopRequestedInDirection__wrappee__empty_~tmp___4~1, stopRequestedInDirection__wrappee__empty_~tmp___5~1, stopRequestedInDirection__wrappee__empty_~tmp___6~1, stopRequestedInDirection__wrappee__empty_~tmp___7~1, stopRequestedInDirection__wrappee__empty_~tmp___8~1, stopRequestedInDirection__wrappee__empty_~tmp___9~1;stopRequestedInDirection__wrappee__empty_~dir := stopRequestedInDirection__wrappee__empty_#in~dir;stopRequestedInDirection__wrappee__empty_~respectFloorCalls := stopRequestedInDirection__wrappee__empty_#in~respectFloorCalls;stopRequestedInDirection__wrappee__empty_~respectInLiftCalls := stopRequestedInDirection__wrappee__empty_#in~respectInLiftCalls;havoc stopRequestedInDirection__wrappee__empty_~retValue_acc~21;havoc stopRequestedInDirection__wrappee__empty_~tmp~21;havoc stopRequestedInDirection__wrappee__empty_~tmp___0~7;havoc stopRequestedInDirection__wrappee__empty_~tmp___1~5;havoc stopRequestedInDirection__wrappee__empty_~tmp___2~3;havoc stopRequestedInDirection__wrappee__empty_~tmp___3~2;havoc stopRequestedInDirection__wrappee__empty_~tmp___4~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___5~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___6~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___7~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___8~1;havoc stopRequestedInDirection__wrappee__empty_~tmp___9~1; 3342494#L2344-24 assume !(1 == stopRequestedInDirection__wrappee__empty_~dir); 3342827#L2513-24 assume !(0 == ~currentFloorID~0); 3342773#L2519-24 assume ~currentFloorID~0 > 0; 3342765#L2520-24 assume !(0 != stopRequestedInDirection__wrappee__empty_~respectFloorCalls); 3342767#L2534-24 assume ~currentFloorID~0 > 0; 3342896#L2536-24 assume 0 != stopRequestedInDirection__wrappee__empty_~respectInLiftCalls; 3342901#L2537-24 assume 0 != ~floorButtons_0~0;stopRequestedInDirection__wrappee__empty_~retValue_acc~21 := 1;stopRequestedInDirection__wrappee__empty_#res := stopRequestedInDirection__wrappee__empty_~retValue_acc~21; 3342764#L2666-24 stopRequestedInDirection_#t~ret91 := stopRequestedInDirection__wrappee__empty_#res;stopRequestedInDirection_~retValue_acc~22 := stopRequestedInDirection_#t~ret91;havoc stopRequestedInDirection_#t~ret91;stopRequestedInDirection_#res := stopRequestedInDirection_~retValue_acc~22; 3342760#L2715-8 timeShift_#t~ret119 := stopRequestedInDirection_#res;timeShift_~tmp___8~3 := timeShift_#t~ret119;havoc timeShift_#t~ret119; 3342761#L3068-4 assume 0 != timeShift_~tmp___8~3;continueInDirection_#in~dir := ~currentHeading~0;havoc continueInDirection_#t~ret94, continueInDirection_~dir, continueInDirection_~tmp~23;continueInDirection_~dir := continueInDirection_#in~dir;havoc continueInDirection_~tmp~23;~currentHeading~0 := continueInDirection_~dir; 3425077#L2759-12 assume !(1 == ~currentHeading~0); 3425073#L2769-36 assume !(0 == ~currentFloorID~0); 3425060#L2769-38 assume !(1 == ~currentHeading~0);~currentFloorID~0 := ~currentFloorID~0 - 1; 3342247#L2775-29 havoc __utac_acc__Specification3_spec__2_#t~ret54, __utac_acc__Specification3_spec__2_#t~ret55, __utac_acc__Specification3_spec__2_~tmp~6, __utac_acc__Specification3_spec__2_~tmp___0~3;havoc __utac_acc__Specification3_spec__2_~tmp~6;havoc __utac_acc__Specification3_spec__2_~tmp___0~3; 3425052#L1507-4 assume -1 == ~expectedDirection~0;havoc getCurrentHeading_#res;havoc getCurrentHeading_~retValue_acc~17;havoc getCurrentHeading_~retValue_acc~17;getCurrentHeading_~retValue_acc~17 := ~currentHeading~0;getCurrentHeading_#res := getCurrentHeading_~retValue_acc~17; 3424074#L2192-13 __utac_acc__Specification3_spec__2_#t~ret54 := getCurrentHeading_#res;__utac_acc__Specification3_spec__2_~tmp___0~3 := __utac_acc__Specification3_spec__2_#t~ret54;havoc __utac_acc__Specification3_spec__2_#t~ret54; 3425050#L1511-4 assume !(1 == __utac_acc__Specification3_spec__2_~tmp___0~3); 3424061#L1519-4 assume !(1 == ~expectedDirection~0); 3424058#L1520-4 cleanup_~i~2 := 1 + cleanup_~i~2; 3424056#L1683-2 [2019-12-07 16:01:40,196 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:40,196 INFO L82 PathProgramCache]: Analyzing trace with hash 932594364, now seen corresponding path program 2 times [2019-12-07 16:01:40,196 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:40,196 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [1487628097] [2019-12-07 16:01:40,197 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:40,208 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:40,239 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:40,240 INFO L348 FreeRefinementEngine]: Using interpolant generator IpTcStrategyModuleSmtInterpolCraig [1487628097] [2019-12-07 16:01:40,240 INFO L220 FreeRefinementEngine]: Constructing automaton from 1 perfect and 0 imperfect interpolant sequences. [2019-12-07 16:01:40,240 INFO L233 FreeRefinementEngine]: Number of different interpolants: perfect sequences [4] imperfect sequences [] total 4 [2019-12-07 16:01:40,240 INFO L156 tionRefinementEngine]: Using interpolant automaton builder IpAbStrategyModuleStraightlineAll [390134486] [2019-12-07 16:01:40,240 INFO L799 eck$LassoCheckResult]: stem already infeasible [2019-12-07 16:01:40,240 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:40,240 INFO L82 PathProgramCache]: Analyzing trace with hash -2030143775, now seen corresponding path program 1 times [2019-12-07 16:01:40,240 INFO L163 FreeRefinementEngine]: Executing refinement strategy CAMEL [2019-12-07 16:01:40,240 INFO L348 FreeRefinementEngine]: Using trace check IpTcStrategyModuleSmtInterpolCraig [247301944] [2019-12-07 16:01:40,240 INFO L94 rtionOrderModulation]: Keeping assertion order NOT_INCREMENTALLY [2019-12-07 16:01:40,253 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 16:01:40,264 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is sat [2019-12-07 16:01:40,303 INFO L174 FreeRefinementEngine]: Strategy CAMEL found a feasible trace [2019-12-07 16:01:40,937 WARN L192 SmtUtils]: Spent 628.00 ms on a formula simplification. DAG size of input: 232 DAG size of output: 200 [2019-12-07 16:01:43,224 WARN L192 SmtUtils]: Spent 2.24 s on a formula simplification. DAG size of input: 220 DAG size of output: 177 [2019-12-07 16:01:43,233 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 16:01:43,233 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 16:01:43,233 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 16:01:43,233 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 16:01:43,233 INFO L129 ssoRankerPreferences]: Use exernal solver: true [2019-12-07 16:01:43,234 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:43,234 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 16:01:43,234 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 16:01:43,234 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product29.cil.c_Iteration16_Loop [2019-12-07 16:01:43,234 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 16:01:43,234 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 16:01:43,269 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,274 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,275 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,276 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,277 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,279 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,280 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,281 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,282 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,284 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,285 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,286 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,287 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,288 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,289 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,290 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,292 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,293 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,295 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,296 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,302 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,303 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,304 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,309 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,310 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,312 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,313 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,314 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,315 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,316 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,320 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,326 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,327 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,328 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,329 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,330 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,332 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,333 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,334 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,335 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,336 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,338 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,350 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,351 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,354 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,355 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,356 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,358 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,359 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,360 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,361 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,362 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,363 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,364 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,365 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,366 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,368 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,369 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,370 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,376 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,377 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,378 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,379 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,380 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,381 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,382 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,384 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,385 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,386 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,387 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,389 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,390 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,393 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,395 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,398 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,399 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,400 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,401 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,402 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,484 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,492 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,493 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,494 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,495 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,503 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,504 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,505 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,506 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,508 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,515 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,516 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,519 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,520 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,521 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,522 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,523 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,537 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,538 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:43,807 WARN L192 SmtUtils]: Spent 117.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 56 [2019-12-07 16:01:43,887 WARN L138 XnfTransformerHelper]: expecting exponential blowup for input size 6 [2019-12-07 16:01:44,227 WARN L192 SmtUtils]: Spent 198.00 ms on a formula simplification. DAG size of input: 50 DAG size of output: 48 [2019-12-07 16:01:44,433 WARN L192 SmtUtils]: Spent 126.00 ms on a formula simplification that was a NOOP. DAG size: 42 [2019-12-07 16:01:44,450 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 16:01:44,451 INFO L404 LassoAnalysis]: Checking for nontermination... No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 2 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,456 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,456 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,465 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,465 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~respectFloorCalls=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~respectFloorCalls=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 3 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,469 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,469 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,472 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,472 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Honda state: {ULTIMATE.start_timeShift_~tmp___1~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 4 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,476 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,476 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,479 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,479 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___6~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 5 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,483 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,483 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,485 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,485 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Honda state: {ULTIMATE.start_timeShift_~tmp___5~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 6 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,489 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,489 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,492 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,492 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret52=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 7 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,496 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,496 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,499 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,499 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_continueInDirection_~tmp~23=0} Honda state: {ULTIMATE.start_continueInDirection_~tmp~23=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 8 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,507 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,507 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,510 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,510 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret91=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret91=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 9 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,515 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,515 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,518 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,518 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~doorState~0=-8} Honda state: {~doorState~0=-8} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 10 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,523 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,523 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,525 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,525 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___0~7=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___0~7=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 11 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,529 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,529 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,532 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,532 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___9~1=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___9~1=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 12 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,539 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,539 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,541 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,541 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___1~5=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___1~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 13 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,547 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,547 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,550 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,550 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_#t~ret114=0} Honda state: {ULTIMATE.start_timeShift_#t~ret114=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 14 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,554 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,554 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,558 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,558 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret79=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret79=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 15 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,563 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,563 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,567 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,567 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret47=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_#t~ret47=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 16 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,571 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,571 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,574 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,575 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_cleanup_#t~ret63=0} Honda state: {ULTIMATE.start_cleanup_#t~ret63=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 17 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,579 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,579 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,582 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,582 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {~expectedDirection~0=-1} Honda state: {~expectedDirection~0=-1} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 18 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,747 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,747 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,758 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,759 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Honda state: {ULTIMATE.start___utac_acc__Specification3_spec__1_~tmp___6~0=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 19 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,767 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,767 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,772 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,772 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret85=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_#t~ret85=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 20 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,779 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,779 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,781 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,782 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___2~3=0} Honda state: {ULTIMATE.start_stopRequestedInDirection__wrappee__empty_~tmp___2~3=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 21 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,785 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,786 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,791 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,792 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_buttonForFloorIsPressed_#res=2, ~floorButtons_1~0=2, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~9=2, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=2} Honda state: {ULTIMATE.start_buttonForFloorIsPressed_#res=2, ~floorButtons_1~0=2, ULTIMATE.start_stopRequestedAtCurrentFloor_~tmp___0~9=2, ULTIMATE.start_buttonForFloorIsPressed_~retValue_acc~16=2} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 22 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,796 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,796 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,798 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,798 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Honda state: {ULTIMATE.start_timeShift_~tmp___2~5=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 23 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,802 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,802 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:44,804 INFO L437 LassoAnalysis]: Proved nontermination for one component. [2019-12-07 16:01:44,804 INFO L440 LassoAnalysis]: Non-Termination argument consisting of: Initial state: {ULTIMATE.start_stopRequestedInDirection_#t~ret90=0} Honda state: {ULTIMATE.start_stopRequestedInDirection_#t~ret90=0} Generalized eigenvectors: [] Lambdas: [] Nus: [] No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 24 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,808 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 0 Nilpotent components: true [2019-12-07 16:01:44,808 INFO L160 nArgumentSynthesizer]: Using integer mode. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 25 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:44,814 INFO L148 nArgumentSynthesizer]: Nontermination analysis: NONLINEAR Allow bounded executions: true Number of generalized eigenvectors: 3 Nilpotent components: true [2019-12-07 16:01:44,814 INFO L160 nArgumentSynthesizer]: Using integer mode. [2019-12-07 16:01:45,440 INFO L444 LassoAnalysis]: Proving nontermination failed: No geometric nontermination argument exists. [2019-12-07 16:01:45,441 INFO L210 LassoAnalysis]: Preferences: [2019-12-07 16:01:45,441 INFO L126 ssoRankerPreferences]: Compute integeral hull: false [2019-12-07 16:01:45,441 INFO L127 ssoRankerPreferences]: Enable LassoPartitioneer: true [2019-12-07 16:01:45,441 INFO L128 ssoRankerPreferences]: Term annotations enabled: false [2019-12-07 16:01:45,442 INFO L129 ssoRankerPreferences]: Use exernal solver: false [2019-12-07 16:01:45,442 INFO L130 ssoRankerPreferences]: SMT solver command: z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:45,442 INFO L131 ssoRankerPreferences]: Dump SMT script to file: false [2019-12-07 16:01:45,442 INFO L132 ssoRankerPreferences]: Path of dumped script: [2019-12-07 16:01:45,442 INFO L133 ssoRankerPreferences]: Filename of dumped script: elevator_spec3_product29.cil.c_Iteration16_Loop [2019-12-07 16:01:45,442 INFO L134 ssoRankerPreferences]: MapElimAlgo: Frank [2019-12-07 16:01:45,442 INFO L274 LassoAnalysis]: Starting lasso preprocessing... [2019-12-07 16:01:45,453 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,456 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,457 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,458 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,459 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,460 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,461 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,462 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,463 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,464 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,465 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,466 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,467 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,468 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,469 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,470 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,471 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,472 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,473 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,474 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,480 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,482 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,483 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,487 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,488 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,489 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,490 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,491 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,496 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,497 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,498 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,499 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,500 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,501 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,502 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,507 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,509 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,510 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,511 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,512 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,513 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,514 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,524 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,525 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,528 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,529 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,530 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,532 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,533 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,534 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,535 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,547 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,549 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,550 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,551 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,565 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,566 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,567 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,652 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,653 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,659 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,660 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,660 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,661 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,662 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,663 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,664 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,665 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,666 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,667 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,669 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,670 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,671 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,672 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,673 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,674 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,675 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,678 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,679 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,680 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,681 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,682 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,683 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,688 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,690 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,694 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,695 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,697 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,701 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,702 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,704 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,705 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,706 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,707 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,709 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,710 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,714 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,715 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,721 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,722 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,723 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,727 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,728 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,729 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,730 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,731 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,732 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:45,733 INFO L141 MapEliminator]: Using MapEliminator with SimplificationTechnique=SIMPLIFY_DDA XnfConversionTechnique=BOTTOM_UP_WITH_LOCAL_SIMPLIFICATION AddInequalities=false OnlyTrivialImplicationsArrayWrite=true OnlyTrivialImplicationsForModifiedArguments=true OnlyArgumentsInFormula=true [2019-12-07 16:01:46,019 WARN L192 SmtUtils]: Spent 117.00 ms on a formula simplification. DAG size of input: 58 DAG size of output: 55 [2019-12-07 16:01:46,085 WARN L138 XnfTransformerHelper]: expecting exponential blowup for input size 6 [2019-12-07 16:01:46,477 WARN L192 SmtUtils]: Spent 183.00 ms on a formula simplification. DAG size of input: 49 DAG size of output: 47 [2019-12-07 16:01:46,561 INFO L292 LassoAnalysis]: Preprocessing complete. [2019-12-07 16:01:46,565 INFO L489 LassoAnalysis]: Using template 'affine'. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 26 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,568 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,569 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,570 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,570 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,570 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,570 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,572 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,572 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,573 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 27 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,577 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,578 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,578 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,578 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,578 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,578 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,578 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,578 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,579 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 28 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,583 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,584 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,585 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,585 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,585 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,585 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,585 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,585 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,586 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 29 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,590 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,591 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,591 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,591 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,591 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,591 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,591 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,591 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,598 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 30 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,601 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,602 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,602 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,603 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,603 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,603 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,603 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,603 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,604 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 31 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,607 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,608 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,609 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,609 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,609 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,609 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,609 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,609 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,610 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 32 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,614 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,615 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,615 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,616 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,616 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,616 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,616 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,616 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,617 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 33 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,621 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,622 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,622 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,622 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,622 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 16:01:46,622 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,623 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 16:01:46,623 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,624 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 34 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,628 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,629 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,629 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,629 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,629 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,629 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,629 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,629 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,630 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 35 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,634 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,635 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,635 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,635 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,635 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,635 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,635 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,635 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,636 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 36 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,640 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,641 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,641 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,641 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,641 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,641 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,642 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,642 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,643 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 37 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,648 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,649 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,649 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,649 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,650 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,650 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,650 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,650 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,651 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 38 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,655 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,656 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,656 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,656 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,656 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,657 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,657 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,657 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,658 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 39 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,661 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,662 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,662 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,662 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,662 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,663 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,663 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,663 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,664 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 40 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,668 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,669 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,669 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,669 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,669 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,669 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,669 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,669 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,671 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 41 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,674 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,675 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,675 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,675 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,675 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,675 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,675 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,675 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,677 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 42 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,680 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,681 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,681 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,681 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,681 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,681 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,682 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,682 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,683 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 43 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,686 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,688 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,688 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,688 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,688 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,688 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,689 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,689 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,690 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 44 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,694 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,695 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,695 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,695 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,695 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,695 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,695 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,695 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,697 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 45 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,700 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,701 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,701 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,701 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,701 INFO L204 nArgumentSynthesizer]: 2 loop disjuncts [2019-12-07 16:01:46,701 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,703 INFO L401 nArgumentSynthesizer]: We have 4 Motzkin's Theorem applications. [2019-12-07 16:01:46,703 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,705 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 46 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,709 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,710 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,710 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,710 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,710 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,710 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,710 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,710 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,712 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 47 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,715 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,716 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,716 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,716 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,716 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,716 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,717 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,717 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,718 INFO L522 LassoAnalysis]: Proving termination failed for this template and these settings. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 48 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,721 INFO L120 nArgumentSynthesizer]: Termination Analysis Settings: Termination analysis: LINEAR_WITH_GUESSES Number of strict supporting invariants: 0 Number of non-strict supporting invariants: 1 Consider only non-deceasing supporting invariants: true Simplify termination arguments: true Simplify supporting invariants: trueOverapproximate stem: false [2019-12-07 16:01:46,722 INFO L338 nArgumentSynthesizer]: Template has degree 0. [2019-12-07 16:01:46,722 INFO L351 nArgumentSynthesizer]: There is no stem transition; disabling supporting invariant generation. [2019-12-07 16:01:46,722 INFO L203 nArgumentSynthesizer]: 1 stem disjuncts [2019-12-07 16:01:46,722 INFO L204 nArgumentSynthesizer]: 1 loop disjuncts [2019-12-07 16:01:46,722 INFO L205 nArgumentSynthesizer]: 2 template conjuncts. [2019-12-07 16:01:46,723 INFO L401 nArgumentSynthesizer]: We have 2 Motzkin's Theorem applications. [2019-12-07 16:01:46,723 INFO L402 nArgumentSynthesizer]: A total of 0 supporting invariants were added. [2019-12-07 16:01:46,725 INFO L420 nArgumentSynthesizer]: Found a termination argument, trying to simplify. [2019-12-07 16:01:46,728 INFO L443 ModelExtractionUtils]: Simplification made 4 calls to the SMT solver. [2019-12-07 16:01:46,729 INFO L444 ModelExtractionUtils]: 1 out of 5 variables were initially zero. Simplification set additionally 1 variables to zero. No working directory specified, using /tmp/vcloud-vcloud-master/worker/run_dir_e1d8cf4e-d2c9-4373-a2e3-49691930ad5c/bin/uautomizer/z3 Starting monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 (exit command is (exit), workingDir is null) Waiting until toolchain timeout for monitored process 49 with z3 SMTLIB2_COMPLIANT=true -memory:1024 -smt2 -in -t:12000 [2019-12-07 16:01:46,732 INFO L435 nArgumentSynthesizer]: Simplifying supporting invariants... [2019-12-07 16:01:46,733 INFO L438 nArgumentSynthesizer]: Removed 0 redundant supporting invariants from a total of 0. [2019-12-07 16:01:46,733 INFO L510 LassoAnalysis]: Proved termination. [2019-12-07 16:01:46,733 INFO L512 LassoAnalysis]: Termination argument consisting of: Ranking function f(~cleanupTimeShifts~0, ULTIMATE.start_cleanup_~i~2) = 1*~cleanupTimeShifts~0 - 1*ULTIMATE.start_cleanup_~i~2 Supporting invariants [] [2019-12-07 16:01:46,735 INFO L297 tatePredicateManager]: 0 out of 0 supporting invariants were superfluous and have been removed [2019-12-07 16:01:46,758 INFO L144 PredicateUnifier]: Initialized classic predicate unifier [2019-12-07 16:01:46,917 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:46,922 INFO L264 TraceCheckSpWp]: Trace formula consists of 1263 conjuncts, 2 conjunts are in the unsatisfiable core [2019-12-07 16:01:46,931 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 16:01:46,980 INFO L136 AnnotateAndAsserter]: Conjunction of SSA is unsat [2019-12-07 16:01:46,981 INFO L264 TraceCheckSpWp]: Trace formula consists of 190 conjuncts, 5 conjunts are in the unsatisfiable core [2019-12-07 16:01:46,983 INFO L287 TraceCheckSpWp]: Computing forward predicates... [2019-12-07 16:01:47,011 INFO L134 CoverageAnalysis]: Checked inductivity of 0 backedges. 0 proven. 0 refuted. 0 times theorem prover too weak. 0 trivial. 0 not checked. [2019-12-07 16:01:47,015 INFO L152 lantAutomatonBouncer]: Defining deterministic Buchi interpolant automaton with honda bouncer for stem and without honda bouncer for loop.1 stem predicates 3 loop predicates [2019-12-07 16:01:47,016 INFO L72 iDifferenceNCSBLazy3]: Start buchiDifferenceNCSBLazy3. First operand 154519 states and 279179 transitions. cyclomatic complexity: 124663 Second operand 5 states. [2019-12-07 16:01:48,237 INFO L76 iDifferenceNCSBLazy3]: Finished buchiDifferenceNCSBLazy3. First operand 154519 states and 279179 transitions. cyclomatic complexity: 124663. Second operand 5 states. Result 194071 states and 350425 transitions. Complement of second has 8 states. [2019-12-07 16:01:48,238 INFO L142 InterpolantAutomaton]: Switched to read-only mode: Buchi interpolant automaton has 5 states 1 stem states 3 non-accepting loop states 1 accepting loop states [2019-12-07 16:01:48,238 INFO L82 GeneralOperation]: Start removeUnreachable. Operand 5 states. [2019-12-07 16:01:48,254 INFO L88 GeneralOperation]: Finished removeUnreachable. Reduced from 5 states to 5 states and 15694 transitions. [2019-12-07 16:01:48,255 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 15694 transitions. Stem has 182 letters. Loop has 52 letters. [2019-12-07 16:01:48,258 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 16:01:48,258 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 15694 transitions. Stem has 234 letters. Loop has 52 letters. [2019-12-07 16:01:48,260 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 16:01:48,260 INFO L84 BuchiAccepts]: Start buchiAccepts Operand 5 states and 15694 transitions. Stem has 182 letters. Loop has 104 letters. [2019-12-07 16:01:48,261 INFO L116 BuchiAccepts]: Finished buchiAccepts. [2019-12-07 16:01:48,261 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 194071 states and 350425 transitions. [2019-12-07 16:01:48,906 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 16:01:48,906 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 194071 states to 0 states and 0 transitions. [2019-12-07 16:01:48,906 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 16:01:48,906 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 16:01:48,906 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 16:01:48,906 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:01:48,906 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 16:01:48,906 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 16:01:48,906 INFO L143 FreeRefinementEngine]: Using predicate unifier PredicateUnifier provided by strategy CAMEL [2019-12-07 16:01:48,906 INFO L142 InterpolantAutomaton]: Constructing interpolant automaton starting with 4 interpolants. [2019-12-07 16:01:48,906 INFO L144 InterpolantAutomaton]: CoverageRelationStatistics Valid=5, Invalid=7, Unknown=0, NotChecked=0, Total=12 [2019-12-07 16:01:48,906 INFO L87 Difference]: Start difference. First operand 0 states and 0 transitions. Second operand 4 states. [2019-12-07 16:01:48,907 INFO L144 Difference]: Subtrahend was deterministic. Have not used determinization. [2019-12-07 16:01:48,907 INFO L93 Difference]: Finished difference Result 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L142 InterpolantAutomaton]: Switched to read-only mode: deterministic interpolant automaton has 2 states. [2019-12-07 16:01:48,907 INFO L82 GeneralOperation]: Start removeNonLiveStates. Operand 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 16:01:48,907 INFO L88 GeneralOperation]: Finished removeNonLiveStates. Reduced from 0 states to 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L87 BuchiClosureNwa]: Accepting states before buchiClosure: 0 [2019-12-07 16:01:48,907 INFO L106 BuchiClosureNwa]: Accepting states after buchiClosure: 0 [2019-12-07 16:01:48,907 INFO L73 IsDeterministic]: Start isDeterministic. Operand 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L80 IsDeterministic]: Finished isDeterministic. Operand is deterministic. [2019-12-07 16:01:48,907 INFO L688 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L711 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L591 BuchiCegarLoop]: Abstraction has 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L424 BuchiCegarLoop]: ======== Iteration 17============ [2019-12-07 16:01:48,907 INFO L72 BuchiIsEmpty]: Start buchiIsEmpty. Operand 0 states and 0 transitions. [2019-12-07 16:01:48,907 INFO L131 ngComponentsAnalysis]: Automaton has 0 accepting balls. 0 [2019-12-07 16:01:48,907 INFO L87 BuchiIsEmpty]: Finished buchiIsEmpty Result is true [2019-12-07 16:01:48,912 INFO L202 PluginConnector]: Adding new model de.uni_freiburg.informatik.ultimate.plugins.generator.buchiautomizer CFG 07.12 04:01:48 BoogieIcfgContainer [2019-12-07 16:01:48,912 INFO L132 PluginConnector]: ------------------------ END BuchiAutomizer---------------------------- [2019-12-07 16:01:48,912 INFO L113 PluginConnector]: ------------------------Witness Printer---------------------------- [2019-12-07 16:01:48,912 INFO L271 PluginConnector]: Initializing Witness Printer... [2019-12-07 16:01:48,913 INFO L275 PluginConnector]: Witness Printer initialized [2019-12-07 16:01:48,913 INFO L185 PluginConnector]: Executing the observer RCFGCatcher from plugin Witness Printer for "de.uni_freiburg.informatik.ultimate.plugins.generator.rcfgbuilder CFG 07.12 03:58:52" (3/4) ... [2019-12-07 16:01:48,916 INFO L140 WitnessPrinter]: No result that supports witness generation found [2019-12-07 16:01:48,916 INFO L132 PluginConnector]: ------------------------ END Witness Printer---------------------------- [2019-12-07 16:01:48,917 INFO L168 Benchmark]: Toolchain (without parser) took 185001.05 ms. Allocated memory was 1.0 GB in the beginning and 7.3 GB in the end (delta: 6.3 GB). Free memory was 940.6 MB in the beginning and 3.9 GB in the end (delta: -2.9 GB). Peak memory consumption was 3.3 GB. Max. memory is 11.5 GB. [2019-12-07 16:01:48,917 INFO L168 Benchmark]: CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 960.9 MB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 16:01:48,917 INFO L168 Benchmark]: CACSL2BoogieTranslator took 491.28 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 70.3 MB). Free memory was 940.6 MB in the beginning and 1.0 GB in the end (delta: -86.1 MB). Peak memory consumption was 36.9 MB. Max. memory is 11.5 GB. [2019-12-07 16:01:48,917 INFO L168 Benchmark]: Boogie Procedure Inliner took 211.98 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 934.1 MB in the end (delta: 92.6 MB). Peak memory consumption was 92.6 MB. Max. memory is 11.5 GB. [2019-12-07 16:01:48,917 INFO L168 Benchmark]: Boogie Preprocessor took 306.35 ms. Allocated memory is still 1.1 GB. Free memory was 934.1 MB in the beginning and 846.9 MB in the end (delta: 87.2 MB). Peak memory consumption was 87.2 MB. Max. memory is 11.5 GB. [2019-12-07 16:01:48,918 INFO L168 Benchmark]: RCFGBuilder took 7916.99 ms. Allocated memory was 1.1 GB in the beginning and 1.8 GB in the end (delta: 705.7 MB). Free memory was 846.9 MB in the beginning and 1.5 GB in the end (delta: -634.2 MB). Peak memory consumption was 542.1 MB. Max. memory is 11.5 GB. [2019-12-07 16:01:48,918 INFO L168 Benchmark]: BuchiAutomizer took 176068.13 ms. Allocated memory was 1.8 GB in the beginning and 7.3 GB in the end (delta: 5.5 GB). Free memory was 1.5 GB in the beginning and 3.9 GB in the end (delta: -2.4 GB). Peak memory consumption was 3.1 GB. Max. memory is 11.5 GB. [2019-12-07 16:01:48,918 INFO L168 Benchmark]: Witness Printer took 3.49 ms. Allocated memory is still 7.3 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 11.5 GB. [2019-12-07 16:01:48,920 INFO L335 ainManager$Toolchain]: ####################### End [Toolchain 1] ####################### --- Results --- * Results from de.uni_freiburg.informatik.ultimate.core: - StatisticsResult: Toolchain Benchmarks Benchmark results are: * CDTParser took 0.13 ms. Allocated memory is still 1.0 GB. Free memory is still 960.9 MB. There was no memory consumed. Max. memory is 11.5 GB. * CACSL2BoogieTranslator took 491.28 ms. Allocated memory was 1.0 GB in the beginning and 1.1 GB in the end (delta: 70.3 MB). Free memory was 940.6 MB in the beginning and 1.0 GB in the end (delta: -86.1 MB). Peak memory consumption was 36.9 MB. Max. memory is 11.5 GB. * Boogie Procedure Inliner took 211.98 ms. Allocated memory is still 1.1 GB. Free memory was 1.0 GB in the beginning and 934.1 MB in the end (delta: 92.6 MB). Peak memory consumption was 92.6 MB. Max. memory is 11.5 GB. * Boogie Preprocessor took 306.35 ms. Allocated memory is still 1.1 GB. Free memory was 934.1 MB in the beginning and 846.9 MB in the end (delta: 87.2 MB). Peak memory consumption was 87.2 MB. Max. memory is 11.5 GB. * RCFGBuilder took 7916.99 ms. Allocated memory was 1.1 GB in the beginning and 1.8 GB in the end (delta: 705.7 MB). Free memory was 846.9 MB in the beginning and 1.5 GB in the end (delta: -634.2 MB). Peak memory consumption was 542.1 MB. Max. memory is 11.5 GB. * BuchiAutomizer took 176068.13 ms. Allocated memory was 1.8 GB in the beginning and 7.3 GB in the end (delta: 5.5 GB). Free memory was 1.5 GB in the beginning and 3.9 GB in the end (delta: -2.4 GB). Peak memory consumption was 3.1 GB. Max. memory is 11.5 GB. * Witness Printer took 3.49 ms. Allocated memory is still 7.3 GB. Free memory is still 3.9 GB. There was no memory consumed. Max. memory is 11.5 GB. * Results from de.uni_freiburg.informatik.ultimate.plugins.generator.traceabstraction: - StatisticsResult: Constructed decomposition of program Your program was decomposed into 17 terminating modules (16 trivial, 1 deterministic, 0 nondeterministic). One deterministic module has affine ranking function cleanupTimeShifts + -1 * i and consists of 5 locations. 16 modules have a trivial ranking function, the largest among these consists of 10 locations. - StatisticsResult: Timing statistics BüchiAutomizer plugin needed 176.0s and 17 iterations. TraceHistogramMax:1. Analysis of lassos took 8.1s. Construction of modules took 88.7s. Büchi inclusion checks took 39.6s. Highest rank in rank-based complementation 3. Minimization of det autom 17. Minimization of nondet autom 0. Automata minimization 14.7s AutomataMinimizationTime, 15 MinimizatonAttempts, 1540832 StatesRemovedByMinimization, 14 NontrivialMinimizations. Non-live state removal took 15.0s Buchi closure took 1.3s. Biggest automaton had 154519 states and ocurred in iteration 15. Nontrivial modules had stage [1, 0, 0, 0, 0]. InterpolantCoveringCapabilityFinite: 0/0 InterpolantCoveringCapabilityBuchi: 0/0 HoareTripleCheckerStatistics: 397002 SDtfs, 1429564 SDslu, 811566 SDs, 0 SdLazy, 132733 SolverSat, 13963 SolverUnsat, 0 SolverUnknown, 0 SolverNotchecked, 88.7s Time LassoAnalysisResults: nont0 unkn0 SFLI0 SFLT0 conc0 concLT0 SILN0 SILU0 SILI15 SILT1 lasso0 LassoPreprocessingBenchmarks: Lassos: inital741 mio100 ax100 hnf100 lsp20 ukn58 mio100 lsp100 div204 bol100 ite100 ukn100 eq139 hnf65 smp94 dnf249 smp57 tf100 neg99 sie104 LassoTerminationAnalysisBenchmarks: ConstraintsSatisfiability: unsat Degree: 0 Time: 6ms VariablesStem: 0 VariablesLoop: 1 DisjunctsStem: 1 DisjunctsLoop: 2 SupportingInvariants: 0 MotzkinApplications: 4 LassoTerminationAnalysisBenchmarks: LassoNonterminationAnalysisSatFixpoint: 22 LassoNonterminationAnalysisSatUnbounded: 0 LassoNonterminationAnalysisUnsat: 1 LassoNonterminationAnalysisUnknown: 0 LassoNonterminationAnalysisTime: 0.9s - TerminationAnalysisResult: Termination proven Buchi Automizer proved that your program is terminating RESULT: Ultimate proved your program to be correct! Received shutdown request...